php5 速记变量

Question

I have seen most of the developers use $name instead of $_GET['name'] and $domain instead of $_POST['domain'] , is this shorthand by php5 and is it safe or any documentation for it.

Answer 1

This works because they're using the (ill-advised and now thankfully deprecated) register_globals feature. (See the PHP manual section on Using Register Globals for the full low-down including security related information.)

I'd really recommend not using this approach and explicitly using the $_POST or $_GET variables instead, as there's a potential world of security issues that await you otherwise.

Answer 2

The examples you listed are only available if register_globals is set. It is deprecated as of PHP 5.3 and should not be used as it is a security risk among other things.

Read more from the docs - http://php.net/manual/en/security.globals.php