Fredrik Jonson wrote:

>>Do not forget about "register globals" php option, which is now 
>>depreceated. Should be set to off for security options , but 
>>You will lost midgard $argc and $argv functionality.
> 
> Would it be very difficult to adapt the argc-argv-functionality of
> midgard to the new paradigm? Isn't it as simple as getting the data
> from the $_GET array instead? 

Yes. But both nadmin and oldadmin require register-globals I think, and 
with the size of those apps, that will be less than trivial to port.

> It would be neat if 1.4.4 didn't require register globals as it is 
> deprecated by the php community and really is a potential security
> problem. Perhaps midgard could figure out which version of php is
> used and adapt it's argv/argc to that?

Adapting midgard is really easy -- all that needs to be done is in the 
rootfile.

> Of course, I think that nadmin would not work either without globals
> but then globals would only have to be enabled on the virtual host
> that delivers nadmin, not as today _every_ host that uses midgard. 

Ah, good point.

Emile



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to