Andreas Flack writes:

Hi!

> <?php $_MIDGARD = $GLOBALS['midgard']; ?>
> 
> So in essence, there is an object called $GLOBALS['midgard'] and an
> array $_MIDGARD. I always thought the two were equivalent, but well, it
> seems I was wrong again :-)

An old $midgard is stdClass instance.
There's $_MIDGARD_CONNECTION object introduced in 1.9, so $_MIDGARD must
stay an array.

>> How would you like to corrupt db like this?
> 
> Well, I just thought if what I saw was the default behavior, then all
> actions requiring a can_do() call from style code would fail, leaving
> incomplete DB entries, like the person I created (which was missing the
> midgard_owner privilege). 

Ah, ok. Things are greatly improved in 1.9/2.0.

Piotras
_______________________________________________
user mailing list
[email protected]
http://lists.midgard-project.org/mailman/listinfo/user

Reply via email to