What are the common pitfalls to avoid when transitioning PHP scripts from using register_globals to more secure methods of handling variables?

When transitioning PHP scripts from using register_globals to more secure methods of handling variables, common pitfalls to avoid include relying on global variables, not properly sanitizing user input, and not updating all instances of variable references throughout the code. 

// Avoid using global variables
$my_var = $_POST['my_var'];

// Properly sanitize user input
$my_var = filter_input(INPUT_POST, 'my_var', FILTER_SANITIZE_STRING);

// Update all instances of variable references
echo "My variable is: " . $my_var;

Keywords

register_globals PHP scripts variables security transition

Related Questions