#21015 [Asn]: phpweb isn't register_globals safe

ID: 21015 Updated by: goba@php.net Reported By: toni dot viemero at iki dot fi Status: Assigned Bug Type: Website problem Operating System: Irrelevant PHP Version: 4.3.0RC3 Assigned To: goba New Comment: I was just testing on my local mirror site. I had searched for vars like $REMOTE_HOST and the like but forgot $PHP_SELF which is still used in cal.php, and there are other stuff, when URL parameters are affected (eg. in search.php) where the form parameter names need to be searched for... Previous Comments: ------------------------------------------------------------------------ [2003-08-14 08:56:58] toni dot viemero at iki dot fi So it seems. We had a global override for register globals in php.ini, so I was checking the site with register_globals On anyways :) ------------------------------------------------------------------------ [2003-08-14 08:54:09] goba@php.net Erm, you have probably not checked too closely. There are some pages still dependent on register globals, like the search.php and the cal.php pages. So I am not going to remove this requirement yet from the mirroring guidelines, until I have time to fix those problems too. The search stuff will need time, but until it is fixed, the URL shortcuts are not working and the search box is not functional, so it is not recommended to remove register_globals yet from the mirror config. ------------------------------------------------------------------------ [2003-08-11 05:01:39] toni dot viemero at iki dot fi I removed register_globals from Apache config and everything seemed to work ok. Closing bug. ------------------------------------------------------------------------ [2003-08-09 12:10:33] goba@php.net I was working on this staff the last days, and I am getting confident that there are very few pages left (if any) which depend on register_globals. It would be nice if you would be able to check and report on it ;) ------------------------------------------------------------------------ [2003-01-02 15:28:46] goba@php.net I am on this. But it is a slow process... ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/21015 -- Edit this bug report at http://bugs.php.net/?id=21015&edit=1