For now you can add this to the top of your scripts:

$types_to_register = array('GET','POST','COOKIE','SESSION','SERVER');
  foreach ($types_to_register as $type) {
    $arr = @${'HTTP_' . $type . '_VARS'};
    if (@count($arr) > 0) {
      extract($arr, EXTR_OVERWRITE);
    }
  }

Somebody else posted this a few weeks back and it has worked for me until I
can convert everything over...

Jeff
----- Original Message -----
From: "Kurth Bemis (List Monkey)" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, May 25, 2002 3:23 PM
Subject: [PHP] 4.2.1 Vars


>
> After moving to php 4.2.1 my scripts that use xxx.php?blah=4 fail to work.
>
> I know that i need to turn register_globals on in my config, however I
know
> that there are security problems with this.  So bascially I need to know
> how to make 500+ scripts work without editing a bunch of files to make it
> so that all my get and post vars start with $_POST and $_GET
>
> any ideas?
>
> ~kurth
>
> Kurth Bemis - Network/Systems Administrator, USAExpress.net/Ozone Computer
>
> Security is like an arms race; the best attackers will continue to search
> for more complicated exploits, so we will too.
> Quoted from http://www.openbsd.org/security.html
>
> [EMAIL PROTECTED] | http://kurth.hardcrypto.com
> PGP key available - http://kurth.hardcrypto.com/pgp
>
> Fight Weak Encryption!  Donate your wasted CPU cycles to Distributed.net
> (http://www.distributed.net)
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
>
>



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to