Patch to fix is here:

        http://www.php.net/~jani/patches/bug31440.php_4_3_patch
        http://www.php.net/~jani/patches/bug31440.php_HEAD_patch

    In PHP_4_3 you can overwrite GLOBALS with these queries:

       ?GLOBALS[foo]=err or ?GLOBALS[]=foo or ?GLOBALS=foo

    In HEAD you can overwrite GLOBALS with this only:

       ?GLOBALS=foo

    I didn't investigate WHY that is the only type of query that
    "works" in HEAD branch but the same patch fixed that too.

    None of super-globals can be overwritten like this, be it
    register_globals On or Off.

    IMNSHO, GLOBALS should be "protected".
    (I don't say that this hacky patch of mine is the way, but it does the job 
:)

    --Jani

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php



Reply via email to