#21015 [NEW]: phpweb isn't register_globals safe

From: toni.viemero@iki.fi Operating system: Irrelevant PHP version: 4.3.0RC3 PHP Bug Type: Website problem Bug description: phpweb isn't register_globals safe At least on the following documents giver errors running phpweb register_globals off: include/site.inc downloads.php error/index.php $REMOTE_HOST, $DOCUMENT_ROOT, $SERVER_NAME etc. should be replaced with $_SERVER["..."] etc. Or change mirroring.php to indicate this for future mirrors ("php_value register_globals on" in virtualhost config). Surfing phpweb with error_reporting(E_ALL) errors too like this one: Use of undefined constant NO_BASE - assumed 'NO_BASE' in search.php on line 15. IMHO PHP.net website should represent itself as somehow working example of "error-free" (as in site works perfectly without needing to go backwards compatible from present php.ini default values) php coding :) -- Edit bug report at http://bugs.php.net/?id=21015&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=21015&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=21015&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=21015&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=21015&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=21015&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=21015&r=support Expected behavior: http://bugs.php.net/fix.php?id=21015&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=21015&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=21015&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=21015&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=21015&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=21015&r=dst IIS Stability: http://bugs.php.net/fix.php?id=21015&r=isapi