First off -- THANK YOU!!! I've been saying that pretty much since the Church of Stallman was formed and am honest to JHVH shocked to find anyone else willing to actually SAY IT.
Shades of Basic in most every incarnation. VB crapplets for example.
Yeah, but to me that's like leaving out the closing tags or WORSE, HEAD/BODY tags in HTML, I like to see it so that structure is maintained.
Because I don't want it to be able to be modified once initialized inside my db.php. I consider that another vulnerability. Much less that if I don't restrict it's scope by passing by reference, it's a global again.
I've seen sight few that qualify for that though - I'm not saying they don't exist, but there are very few that seem to meet up to that standard... Mind you, I've been dealing with garbage like Goldmine and so forth so...
Actually, makes it simpler in a way, though really it's a sacrifice to go cross-SQL. mySQL doesn't take the exact same queries as Oracle or MSSQL - hell there are even enough differences for postGre to occasionally need query tweaks. Do you inline those changes with if statements on every query, or do you just include the appropriate values by extending the PDO object with an array containing all your queries appropriate to the task at hand? This part of why I LIKE pdo->prepare a LOT.
As I said, the only secure system is one with zero access, from there it's a matter of degree.
It's sad when that's a step too far - really is.
Which is fine for large companies handling it in-house, but not for something joe-six pack is going to install on any of the billion fly-by-night shared hosts. I think the target audience plays a crucial role on that.
I've gotten that for 40 years, getting a little sick of it. As I've said other places "Englisc, modor wyrter! Gedon eow cweþan hit!?!" -- I know my manner of speech is archaic, but DAMN is education really that piss poor now or something? Half the time you make a simile now you get some jackass saying "That's off topic, what's that got to do with it?"... and yes, I said simile, not Smiley.
The lack of general literacy really is one of my pet peeves. Maybe I should just turn my hat around backwards, put my pants around my knees and start typing everything in L33T?
Though I also think it's the New England Yankee businessman attitude - we'll tell you something sucks to your face... and then try to help make it better. If you aren't willing able to get angry over something sucking, and couch every statement in meaningless plattitudes how the devil is anything supposed to get better. Slapping the rose coloured glasses on people's heads and leading them down the garden path by saying "everything's ok" is not how things get BETTER... But we're the type of people who will call you a lazy sleazeball *** to your face right before we give you the shirt off our backs.
New Englanders are NOT a friendly people in terms of speech - but we're also generous to a fault. <brooklyn>Ya got a freaking problem with that?</brooklyn>
"The reasonable man adapts himself to the world; the unreasonable one persists in trying to adapt the world to himself. Therefore, all progress depends on the unreasonable man." -- George Bernard Shaw