Re: 4.2.1 Vars

From: Date: Sat, 25 May 2002 19:51:18 +0000
Subject: Re: 4.2.1 Vars
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-99258@lists.php.net to get a copy of this message
For now you can add this to the top of your scripts: $types_to_register = array('GET','POST','COOKIE','SESSION','SERVER'); foreach ($types_to_register as $type) { $arr = @${'HTTP_' . $type . '_VARS'}; if (@count($arr) > 0) { extract($arr, EXTR_OVERWRITE); } } Somebody else posted this a few weeks back and it has worked for me until I can convert everything over... Jeff ----- Original Message ----- From: "Kurth Bemis (List Monkey)" <listmonkey@usaexpress.net> To: <php-general@lists.php.net> Sent: Saturday, May 25, 2002 3:23 PM Subject: [PHP] 4.2.1 Vars > > After moving to php 4.2.1 my scripts that use xxx.php?blah=4 fail to work. > > I know that i need to turn register_globals on in my config, however I know > that there are security problems with this. So bascially I need to know > how to make 500+ scripts work without editing a bunch of files to make it > so that all my get and post vars start with $_POST and $_GET > > any ideas? > > ~kurth > > Kurth Bemis - Network/Systems Administrator, USAExpress.net/Ozone Computer > > Security is like an arms race; the best attackers will continue to search > for more complicated exploits, so we will too. > Quoted from http://www.openbsd.org/security.html > > kurth@usaexpress.net | http://kurth.hardcrypto.com > PGP key available - http://kurth.hardcrypto.com/pgp > > Fight Weak Encryption! Donate your wasted CPU cycles to Distributed.net > (http://www.distributed.net) > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > > > >

« previous php.general (#99258) next »