Re: upgrading from 4.1.2 to 4.2.3 issues/incompatibilities?

On Thu, 17 Oct 2002 13:05:14 -0400 Brian Tully <btully@gstockco.com> wrote: > hey there - > > I'm in crisis mode after our server was hacked into for the 2nd time over > the past month. Our host claims that PHP 4.1.2 might be the culprit and > recommends that we upgrade to version 4.2.3 -- warning however that scripts > may no longer work with the new version of PHP. The biggest difference is that register_globals is installed by default as 'off' in php.ini. Which is probably also the biggest reason in the last few months for people's <'I upgraded, and now my code doesn't work'> postings on this list. Change it to on - and in the meantime if you want to, start updating your code to take advantage of being able to run with it off (it's a matter of being more secure by you saying exactly where the variables are coming from). You can turn it on in directory hierarchies in a .htaccess file - and if you're gonna update the code, I'd suggest also turning on maximum error reporting (they've added extra numbers, so it's a lot more than just 15 - I just put in 65535). If your code can run cleanly with maximum reporting, then it's gonna be better code anyway. Alister