Re: register_globals won't turn off!

From: Date: Sun, 28 Sep 2003 02:53:52 +0000
Subject: Re: register_globals won't turn off!
References: 1 2 3 4 5  Groups: php.general 
Request: Send a blank email to php-general+get-164147@lists.php.net to get a copy of this message
Hi, I would try recompiling PHP with the bare minimum, and see if you can reproduce the behavior. If not, then add in extensions one by one. If you still see the behavior, modify a value in php.ini, and make sure you see it show up in phpinfo() (don't forget to restart Apache). If changes don't show up, it's reading a different php.ini, which can be a bit loopy. Greg Damon Kohler wrote:
I added the error_reporting line and it doesn't seem to make any difference actually. No warnings or notices. Yes, I can recompile PHP. Damon "Greg Beaver" <greg@chiaraquartet.net> wrote in message news:3F764B50.7020408@chiaraquartet.net...
Hi, if you append ?test=foo to the url you supplied, it will print "foo" - register_globals is definitely on, perhaps you could add this to the start of the file: ini_set('error_reporting', E_ALL); so we can see the result? You should also be seeing a notice of an undefined variable. It's possible you've found a bug, maybe one of the many extensions you have loaded enables register_globals - do you have access to recompile php? Greg Damon Kohler wrote:
Don't know anything about an auto_prepend_file. There is no .htaccess
file.
Beside, phpinfo says register_globals is off both globaly and localy. Damon "Greg Beaver" <greg@chiaraquartet.net> wrote in message news:3F764746.4010404@chiaraquartet.net...
Hi Damon, Do you have an auto_prepend_file? Also, check the contents of .htaccess, make sure register_globals is not set to on there. Greg Damon Kohler wrote:
Well, it does turn off. At least phpinfo() says that it's off. However,
PHP
is acting as though it's still turned on. The source code for the page
I'm
using to test this odd result is: <html> <head> </head> <body> <form action="<?=$_SERVER['PHP_SELF']?>" method="post"> <input name="test"> <input type="submit"> </form> </body> </html> <?php print $test; phpinfo(); ?> I'm running PHP 4.3.3 on RH7. When the form is submited, the value is printed despite the fact it's printing $test and not $_POST['test'].
This is
copy pasted from the results:
    register_argc_argv Off Off
    register_globals Off Off
I'm completely stumped. Thanks in advance, Damon


« previous php.general (#164147) next »