Re: [PHP] PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1

2002-07-23 Thread Dan Hardiker
Hi, 1. Every peice of software has bugs - PHP still bugs - it always will have. Deal with it. 2. It is no-one's responsibility other than your own to *test the software*. Anyone using any form of software in a production environment has at least one test bed to install new versions of software

Re: [PHP] PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1

2002-07-22 Thread Tyler Longren
I actually enjoy all the security releases. They give me something to do at work! tyler On Mon, 22 Jul 2002 11:55:31 -0500 (CDT) Greg Donald [EMAIL PROTECTED] wrote: On Mon, 22 Jul 2002, Marko Karppinen wrote: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1

Re: [PHP] PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1

2002-07-22 Thread Michael Geier
Quoting Greg Donald [EMAIL PROTECTED]: It's not about that.. It's about the hell I've already been through with the new register_globals setting. Then two huge ass security holes following in the next couple of months after that. If it doesn't bother you the hassles 'the php group' is

Re: [PHP] PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1

2002-07-22 Thread Richard Lynch
On Mon, 22 Jul 2002, Marko Karppinen wrote: PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 Not only did I get to re-write all my apps the past few months because of the new register_globals default that was imposed by `the php group`... You could have just *CHANGED