number6 Posted September 7, 2006 Posted September 7, 2006 The requirement of "register_globals on" on web shop solution sounds quite suspicious and insecure. There is a patch (http://www.oscommerce.com/community/contributions,2097) for using "register_globals off". But is there any plans to update the main source of Oscommerce to work with register_globals off? Or have the Oscommerce developers lost their enthusiasm on the project?
brianstorm Posted September 7, 2006 Posted September 7, 2006 that is planned for ms3 which you can check on progress through the roadmap.... i monitored it for a while but ending up just applying the register_globals fix which seems to work fine with ten thousand dollars we'll all be millionaires
number6 Posted September 7, 2006 Author Posted September 7, 2006 that is planned for ms3 which you can check on progress through the roadmap.... i monitored it for a while but ending up just applying the register_globals fix which seems to work fine I think there is only one mention about register_globals in roadmap: register_globals And magic_quotes_gpc Compatibility, "Description: The codebase has been strengthened by being programmed with register_globals and magic_quotes_gpc in mind, to prevent attacks on the server." Its description doesn't sound like that it would work with "register_globals off" but maybe I am wrong?
mickyd Posted September 7, 2006 Posted September 7, 2006 HAHAHAHAHAHAHAHAHA HAHAHAHAHAHAHA HAHAHAHAHAHA..... Whats so funny I hear you ask? I spent a good few hours installing PHP 5 on my host just so I could have register globals turned on and theres a patch that gets around it.... Oh I want to cry.. lol :blush:
New 
Recommended Posts
Archived
This topic is now archived and is closed to further replies.