...register_globals.

[ibneko]

....I think they're the dumbest thing ever. Along with the lack of initializing variables.

I just spent over an hour trying to figure out why:
$userid = -1;
was overwriting the value in $_SESSION['userid'].

::really disliking PHP now::

Comments

[fbartho.livejournal.com]

Dude, your webhost should have disabled register_globals anyways! Severely problem causing across the board and I think it leads to insecurity issues.

[ibneko.livejournal.com]

Yeah. They're running 4.4.4, past the point where it's disabled by default. So.. I dunno. It's stupid.