compuXP

Hi all,

I'm a "little" upset at PolurNet for turning OFF register_globals on my server without notice the other day.

I wandered onto one of my sites and noticed that it just kinda... broke... for no reason and no alteration.

Turns out they turned off register_globals, which is a PHP setting that defines how variables are interpreted. For example, $id is a very generic variable. But, if $id came from the URL as a GET variable (file.php?id=1) or from a form as a POST variable, it cannot be known to exist if register_globals is off.

Want to see what I'm talking about? Go to www.ilookup.info and do a search. I haven't touched that site in months. What comes up? It's BLANK. There's 0 results, because it doesn't know the variables exist.

My problem then: Do I have to go through the thousands and thousands of lines of code in my network of websites' code and replace $id with $_GET['id'] or $_POST['id']? That will take me WEEKS if not MONTHS to figure out and re-interpret.

Is there any easier solution?
-Matt

__________________
Retired Moderator/Member/Friend/Helper - it was great working with all of you!

jumpenjuhosaphat

Yeah, contact your hosting company and request that they reset the globals. I wonder why they would turn them off in the first place? Maybe they were hacked?

__________________
Storage Sheds
Lost Forum

rohan2kool

most probably they have set it off because of XSS vulnerabilities or maybe b'coz it's the worst programming practices ever known to me.

unfortunately, register_globals cannot be changed using ini_set() function. If you have apache serve, you can try putting this .htaccess file in your script to turn it on:

php_flag register_globals off

just save it as '.htaccess' in the folder where your files are located. Just might help.

OR

at the top of the script type this:


for each variable. Know that's pretty tedious.. but u got no real choice

And from the next time, use $_GET[] and $_POST[]

__________________
Eat healthy, Stay Fit, Die Anyway.
--==--
If there is a man who knows everything about women, there is a Windows distribution without bugs.

compuXP

No, they turned it off for security reasons...

Yeah, I know, which is what I'm scared about.

I actually just found a way to emulate register_globals... which I'll do, but from now on, I'll use $_GET and $_POST.

__________________
Retired Moderator/Member/Friend/Helper - it was great working with all of you!

kenni

You should be using $_GET and $_POST from the start to get your habbits going. Alternatively, you can add that line (rohan2kool posted) to your .htaccess and it should be working

__________________
Wanna thank someone? Give 'em a rep. More info.