Hi,

if you append ?test=foo to the url you supplied, it will print "foo" - register_globals is definitely on, perhaps you could add this to the start of the file:

ini_set('error_reporting', E_ALL);

so we can see the result? You should also be seeing a notice of an undefined variable. It's possible you've found a bug, maybe one of the many extensions you have loaded enables register_globals - do you have access to recompile php?

Greg

Damon Kohler wrote:

Don't know anything about an auto_prepend_file. There is no .htaccess file.
Beside, phpinfo says register_globals is off both globaly and localy.

Damon

"Greg Beaver" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]

Hi Damon,

Do you have an auto_prepend_file?  Also, check the contents of
.htaccess, make sure register_globals is not set to on there.

Greg

Damon Kohler wrote:

Well, it does turn off. At least phpinfo() says that it's off. However,

PHP


is acting as though it's still turned on. The source code for the page

I'm


using to test this odd result is:

<html>
<head>
</head>
<body>
<form action="<?=$_SERVER['PHP_SELF']?>" method="post">
<input name="test">
<input type="submit">
</form>
</body>
</html>
<?php

print $test;

phpinfo();
?>

I'm running PHP 4.3.3 on RH7. When the form is submited, the value is
printed despite the fact it's printing $test and not $_POST['test'].

This is


copy pasted from the results:

     register_argc_argv Off Off
     register_globals Off Off


I'm completely stumped.


Thanks in advance,
Damon

-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php



Reply via email to