Re: 4.2.1 Vars
| From: | Jeff Lewis | Date: | Sat, 25 May 2002 19:51:18 +0000 |
| Subject: | Re: 4.2.1 Vars | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-99258@lists.php.net to get a copy of this message | ||
For now you can add this to the top of your scripts:
$types_to_register =
array('GET','POST','COOKIE','SESSION','SERVER');
foreach ($types_to_register as $type) {
$arr = @${'HTTP_' . $type . '_VARS'};
if (@count($arr) > 0) {
extract($arr, EXTR_OVERWRITE);
}
}
Somebody else posted this a few weeks back and it has worked for me until I
can convert everything over...
Jeff
----- Original Message -----
From: "Kurth Bemis (List Monkey)" <listmonkey@usaexpress.net>
To: <php-general@lists.php.net>
Sent: Saturday, May 25, 2002 3:23 PM
Subject: [PHP] 4.2.1 Vars
>
> After moving to php 4.2.1 my scripts that use xxx.php?blah=4 fail to work.
>
> I know that i need to turn register_globals on in my config, however I
know
> that there are security problems with this. So bascially I need to know
> how to make 500+ scripts work without editing a bunch of files to make it
> so that all my get and post vars start with $_POST and $_GET
>
> any ideas?
>
> ~kurth
>
> Kurth Bemis - Network/Systems Administrator, USAExpress.net/Ozone Computer
>
> Security is like an arms race; the best attackers will continue to search
> for more complicated exploits, so we will too.
> Quoted from http://www.openbsd.org/security.html
>
> kurth@usaexpress.net | http://kurth.hardcrypto.com
> PGP key available - http://kurth.hardcrypto.com/pgp
>
> Fight Weak Encryption! Donate your wasted CPU cycles to Distributed.net
> (http://www.distributed.net)
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
>
>