From 8ef1175295d932d5b0eec5317c6b054dfa03fe8a Mon Sep 17 00:00:00 2001
From: Yasuo Ohgaki <yohgaki@php.net>
Date: Fri, 15 Feb 2002 01:58:23 +0000
Subject: [PATCH] Fixed description for users enable register_globals

git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@70268 c90b9560-bf6c-de11-be94-00142212c4b1
---
 functions/session.xml | 18 ++++++++++++++----
 1 file changed, 14 insertions(+), 4 deletions(-)

diff --git a/functions/session.xml b/functions/session.xml
index 325a365311..2c1f5cc813 100644
--- a/functions/session.xml
+++ b/functions/session.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="iso-8859-1"?>
-<!-- $Revision: 1.80 $ -->
+<!-- $Revision: 1.81 $ -->
  <reference id="ref.session">
   <title>Session handling functions</title>
   <titleabbrev>Sessions</titleabbrev>
@@ -147,11 +147,21 @@ unset($_SESSION['count']);
     <caution>
      <para>
       If you are using
-      <varname>$HTTP_SESSION_VARS</varname>/<varname>$_SESSION</varname>,
+      <varname>$HTTP_SESSION_VARS</varname>/<varname>$_SESSION</varname>
+      and disable <link
+      linkend="ini.register-globals"><literal>register_globals</literal></link>,
       do not use <function>session_register</function>,
       <function>session_is_registered</function> and
-      <function>session_unregister</function> unless you know internal
-      of session module.
+      <function>session_unregister</function>.
+     </para>
+     <para>
+      If you enable <link
+       linkend="ini.register-globals"><literal>register_globals</literal></link>,
+       <function>session_unregister</function> should be used since
+       session variables are registered as global variables when
+       session data is deserialized. Disabling <link
+       linkend="ini.register-globals"><literal>register_globals</literal></link>
+       is recommended for both security and performance reason.
      </para>
     </caution>
     <example>