[geeklog-devel] Pushing GL1 into regester_globals=off

[Blaine Lang]

We could also add something like this at the top of each program or  in to
COM_siteHeader

// register_globals cheat code
//HTTP_GET_VARS
while (list($key, $val) = @each($HTTP_GET_VARS)) {
       $GLOBALS[$key] = $val;
}
//HTTP_POST_VARS
while (list($key, $val) = @each($HTTP_POST_VARS)) {
       $GLOBALS[$key] = $val;
}
----- Original Message -----
From: "Tony Bibbs" <tony at tonybibbs.com>
To: <geeklog-devel at lists.geeklog.net>
Sent: Monday, July 28, 2003 2:31 PM
Subject: Re: [geeklog-devel] Pushing GL1 into regester_globals=off



> Well, it's not that easy...well, it is technically easy but it will be a

> lot of work.  For each page you need to figure out which variables are

> registered as globals in the current 1.3.x tree.  Then you need to

> replace them with the $HTTP_POST_VARS or $HTTP_GET_VARS.

>

> We could, as a group, decide to require which ever version of PHP that

> started usin the $_REQUEST object.  The good thing about that is then

> regardless of a POST or a GET you can use the $_REQUEST['<varname>'].

> If we don't want to do that, we *could* simply either ask for the PHP

> version in config.php or check it through the code and if they don't

> support $_REQUEST, then you could add the the top of lib-common.php

> somewhere this:

>

> $_REQUEST = array_merge($HTTP_POST_VARS, $HTTP_GET_VARS);

>

> That way the code regardless of PHP version would be the same.

>

> Make sense?  Comments, questions, concerns?  How much fun would

> regression testing this be?

>

> --Tony

>

> LIMBURG, Mark wrote:

>

> >Howdy

> >

> >I'm thinking of taking this on.  Are there any *good* doco's on how to

> >approach this?  Any key examples that anyone could provide?

> >

> >Regards

> >

> >Mark Limburg

> >

> >Operations Support Team Leader

> >Information Services

> >BAE SYSTEMS Australia

> >

> >

> >_______________________________________________

> >geeklog-devel mailing list

> >geeklog-devel at lists.geeklog.net

> >http://lists.geeklog.net/listinfo/geeklog-devel

> >

> >

>

> _______________________________________________

> geeklog-devel mailing list

> geeklog-devel at lists.geeklog.net

> http://lists.geeklog.net/listinfo/geeklog-devel