Re: [pear-webmaster] [PECL-BUG] Bug #5741 [NEW]: /account-request.php broken
| From: | Pierre | Date: | Fri, 21 Oct 2005 16:15:10 +0000 |
| Subject: | Re: [pear-webmaster] [PECL-BUG] Bug #5741 [NEW]: /account-request.php broken | ||
| References: | 1 2 | Groups: | php.pear.webmaster |
| Request: | Send a blank email to pear-webmaster+get-4523@lists.php.net to get a copy of this message | ||
On Fri, 21 Oct 2005 18:01:32 +0200
mj@php.net (Martin Jansen) wrote:
> On Fri Oct 21, 2005 at 12:2427PM -0000, mikael at synd dot info wrote:
> > http://pecl.php.net/account-request.php seems to be
> > broken, hitting
> > submit results in a "Please enter your desired username!" error no
> > matter what one types into the form.
>
> The reason for this issue (and for the defunct trackback
> administration which has been fixed yesterday) is that Pierre
> disabled register_globals without making sure that nothing breaks.
> Considering that there are most likely other parts that are also
> broken now, I'd like to enable register_globals again. Objections?
Yes, I have strong objections to enable register_globals.
We have to clean this code instead of allowing such things. It is a
shame to have to see such mistakes in our codes.
For the record, I asked on irc some developers about that, we all
agreed to disable it and then fix the problems when they occur.
The reasons why we disable it are known and were critical security
issues.
--Pierre