OpenID in PHP

[Kristopher Tate]

What the heck are you talking about? $secret is an internal variable. 
We have Reg_globals turned off.

Haha, why do you think we're using $_GET??

-Kris

On 2005/06/29, at 0:51 PM, Xageroth Sekarius wrote:

>> //Get secret
>>      $secret = shell_exec('cat
>> /tmp/oid-shared_secret-'.$_GET['openid_assoc_handle'].'.secret');
>>
>
> You do know that's dangerous, right?
> Register globals is defaulted off to avoid this kind of code.
>
>