What is the difference between using register_globals and super_globals in PHP?

The main difference between using register_globals and super_globals in PHP is that register_globals automatically creates global variables from user input, which can lead to security vulnerabilities like injection attacks. On the other hand, super_globals like $_GET, $_POST, and $_REQUEST require explicit access, making it more secure. To solve this issue, it is recommended to disable the use of register_globals in your PHP configuration and use super_globals instead to access user input. 

// Disable register_globals in php.ini file
// Set register_globals = Off

// Access user input using super_globals
$username = $_POST['username'];
$password = $_POST['password'];

Keywords

register_globals super_globals PHP security variables

Related Questions