ID: 20652 Updated by: [EMAIL PROTECTED] Reported By: [EMAIL PROTECTED] -Status: Open +Status: Bogus Bug Type: Scripting Engine problem Operating System: Win2K Server PHP Version: 4.2.3 New Comment:
In PHP 4.2.0, the 'register_globals' setting default changed to 'off'. See http://www.php.net/release_4_2_0.php for more info. We are sorry about the inconvenience, but this change was a necessary part of our efforts to make PHP scripting more secure and portable. Previous Comments: ------------------------------------------------------------------------ [2002-11-26 10:38:48] [EMAIL PROTECTED] Tried for days to figure why the tutorial I'm working with had so many apparent bugs. It was written against a beta PHP4 and apparently at that point register_globals = on in php.ini was standard. This is both a bug and an education problem, since examples of "correct" security-conscious code are non-existent and newbies to PHP have no idea of what security issues are involved. I can't upgrade to 4.2.3RC1 or CVS snapshot right now due to other issues. Yes, this is known data (dupe of various other bug reports) but important enough to address with at least more documentation. Caused me about two lost days here. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=20652&edit=1
