Add Warning to PHP Security Advisory
| From: | jimbishop | Date: | Tue, 30 Jul 2002 15:00:15 +0000 |
| Subject: | Add Warning to PHP Security Advisory | ||
| Groups: | php.mirrors | ||
| Request: | Send a blank email to php-mirrors+get-11627@lists.php.net to get a copy of this message | ||
My webhost upgraded to PHP 4.2.2 over the weekend. I went and read the
security advisory (http://www.php.net/release_4_2_2.php) and didn't think
too much of it until I walked into work on Monday and everything was in
chaos.
Upgrading to 4.2+ changes the default setting of register_globals in the
php.ini file. How did I find this out? When none of my variables were
being passed, I went to check the pre-defined variables page on PHP.net
and found my answer.
Why was/is this not in the security alert?
Jim Bishop
Senior Developer
Thinkware Media