Re: Add Warning to PHP Security Advisory

Mostly because: A) It is there since 4.2.0 (including the previous release) B) It says so in the nice text box that you should have read after you ran ./configure ... On Tue, 30 Jul 2002, jimbishop wrote: > My webhost upgraded to PHP 4.2.2 over the weekend. I went and read the > security advisory (http://www.php.net/release_4_2_2.php) and didn't think > too much of it until I walked into work on Monday and everything was in > chaos. > > Upgrading to 4.2+ changes the default setting of register_globals in the > php.ini file. How did I find this out? When none of my variables were > being passed, I went to check the pre-defined variables page on PHP.net > and found my answer. > > Why was/is this not in the security alert? > > > Jim Bishop > Senior Developer > Thinkware Media > -- Best regards, Shimi ---- "Outlook is a massive flaming horrid blatant security violation, which also happens to be a mail reader." "Sure UNIX is user friendly; it's just picky about who its friends are."