Re: PHP Security Advisory: Vulnerability in PHP versions 4.2.0and 4.2.1

The superglobals have been a round for a bit so it's not as if everything's got to be updated overnight. I run PHP on windows and upgrading is just a matter of unzipping the archive to my PHP folder and overwriting all the older files - dead simple. Don't even have to change php.ini if I don't want to! "Greg Donald" <greg@destiney.com> wrote in message news:Pine.LNX.4.44.0207221147020.20154-100000@destiney.com... > On Mon, 22 Jul 2002, Marko Karppinen wrote: > > > PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 > > Not only did I get to re-write all my apps the past few months because of > the new register_globals default that was imposed by the php > group... > > Now I get to upgrade my PHP install once a month or so cause of new > security holes.. Yay! > > Wasn't this new register_globals setting supposed to enhance security? > > How would you like to be a sys admin with dozens of machines to upgrade > before you can proceed with anythign else? > > Can anyone say Ruby? > > > -- > Greg Donald > http://destiney.com >