Re: register_globals won't turn off!

From: Date: Sun, 28 Sep 2003 03:00:02 +0000
Subject: Re: register_globals won't turn off!
References: 1 2 3 4 5 6  Groups: php.general 
Request: Send a blank email to php-general+get-164148@lists.php.net to get a copy of this message
Ok. I'll get around to that sometime. But I think to start, I'll use that code from php|a that unregisters globals and such. Guess that is a smart thing to do. Never know when it's gonna fail like that. Thanks for your help all, Damon "Greg Beaver" <greg@chiaraquartet.net> wrote in message news:3F764D40.7080404@chiaraquartet.net... > Hi, > > I would try recompiling PHP with the bare minimum, and see if you can > reproduce the behavior. If not, then add in extensions one by one. If > you still see the behavior, modify a value in php.ini, and make sure you > see it show up in phpinfo() (don't forget to restart Apache). If > changes don't show up, it's reading a different php.ini, which can be a > bit loopy. > > Greg > > Damon Kohler wrote: > > > I added the error_reporting line and it doesn't seem to make any difference > > actually. No warnings or notices. Yes, I can recompile PHP. > > > > Damon > > > > "Greg Beaver" <greg@chiaraquartet.net> wrote in message > > news:3F764B50.7020408@chiaraquartet.net... > > > >>Hi, > >> > >>if you append ?test=foo to the url you supplied, it will print "foo" - > >>register_globals is definitely on, perhaps you could add this to the > >>start of the file: > >> > >>ini_set('error_reporting', E_ALL); > >> > >>so we can see the result? You should also be seeing a notice of an > >>undefined variable. It's possible you've found a bug, maybe one of the > >>many extensions you have loaded enables register_globals - do you have > >>access to recompile php? > >> > >>Greg > >> > >>Damon Kohler wrote: > >> > >> > >>>Don't know anything about an auto_prepend_file. There is no .htaccess > > > > file. > > > >>>Beside, phpinfo says register_globals is off both globaly and localy. > >>> > >>>Damon > >>> > >>>"Greg Beaver" <greg@chiaraquartet.net> wrote in message > >>>news:3F764746.4010404@chiaraquartet.net... > >>> > >>> > >>>>Hi Damon, > >>>> > >>>>Do you have an auto_prepend_file? Also, check the contents of > >>>>.htaccess, make sure register_globals is not set to on there. > >>>> > >>>>Greg > >>>> > >>>>Damon Kohler wrote: > >>>> > >>>> > >>>>>Well, it does turn off. At least phpinfo() says that it's off. However, > >>> > >>>PHP > >>> > >>> > >>>>>is acting as though it's still turned on. The source code for the page > >>> > >>>I'm > >>> > >>> > >>>>>using to test this odd result is: > >>>>> > >>>>><html> > >>>>><head> > >>>>></head> > >>>>><body> > >>>>><form action="<?=$_SERVER['PHP_SELF']?>" > >>>>>method="post"> > >>>>><input name="test"> > >>>>><input type="submit"> > >>>>></form> > >>>>></body> > >>>>></html> > >>>>><?php > >>>>> > >>>>>print $test; > >>>>> > >>>>>phpinfo(); > >>>>>?> > >>>>> > >>>>>I'm running PHP 4.3.3 on RH7. When the form is submited, the value is > >>>>>printed despite the fact it's printing $test and not > >>>>>$_POST['test']. > >>> > >>>This is > >>> > >>> > >>>>>copy pasted from the results: > >>>>> > >>>>> register_argc_argv Off Off > >>>>> register_globals Off Off > >>>>> > >>>>> > >>>>>I'm completely stumped. > >>>>> > >>>>>Thanks in advance, > >>>>>Damon >

« previous php.general (#164148) next »