Register Globals is a good thing if used properly. The reason I like it is because you can switch based on a piece of information passed by any means possible. GET POST SESSION or COOKIE... Like my module thing, I can set a session cookie for each module, then redirect back to it no sweat just by using $module.

True, but let's say you are using a variable called $user_id to store the id number of the current user. Someone could override it's value by putting &userid=666 on the URL. There are all sorts of other security problems that could appear with a malformed URL.

However, with register_globals Off, you can access the information on the URL with the $_GET[] SuperGlobal. So you could access which module you were using in your code by doing $module = $_GET['module'];

That means you only get the information you want on the URL, and internal variables are not overriden by the URL.

Anyways.

Yes, but with register_globals ON - you can do both. :)

Yes Register_globals makes things simpler, but the fact that you can override variables makes it possible that someone could compromise your system. With it off, that can't happen unless you code something really stupid, which I have probably done ;)

But anyways. There is a reason it's off by default, and besides, if you want your code to be distrubuted by the public, you need to design it so that it does not have to be on.

$module = "";
$module = isset($_SESSION['module']) ? $_SESSION['module'] : $module;
$module = isset($_GET['module']) ? $_GET['module'] : $module;
$module = isset($_POST['module']) ? $_POST['module'] : $module;
$module = isset($_COOKIE['module']) ? $_COOKIE['module'] : $module;


^_^

Bah, so yeah, that does what you should do with register_globals off ;)

Besudes, using $_REQUEST you can do all that in one line.

$module = isset($_REQUEST['module']) ? $_REQUEST['module'] : $module;

But, this works just as well.

$module = $_REQUEST['module'];

No need to see if it's set, if it is not set, it makes $module null anyway.

$_RESQUEST? I have not researched this variable!

$_REQUEST pulls from $_SESSION, $_GET, $_POST, and $_COOKIE I think.

Makes it a bit simpler.