Apr 18th, 2010, 10:39 AM
Hey Marcat,
No, it's nothing to worry about. The only way that setting could be subverted would be if a malicious PHP script is already running on your server, in which you have FAR bigger problems to contend with. Alternatively, if you have the PHP register_globals setting enabled (which is getting pretty rare these days and should NEVER be enabled!). But even then, it wouldn't allow anyone to get access to anything - the script just wouldn't work from a web browser.
As Martin noted, it's really just a way for the API to access some functionality.
Good question though.
- Ben
No, it's nothing to worry about. The only way that setting could be subverted would be if a malicious PHP script is already running on your server, in which you have FAR bigger problems to contend with. Alternatively, if you have the PHP register_globals setting enabled (which is getting pretty rare these days and should NEVER be enabled!). But even then, it wouldn't allow anyone to get access to anything - the script just wouldn't work from a web browser.
As Martin noted, it's really just a way for the API to access some functionality.
Good question though.
- Ben