Register Globals V 1.5 Patch

[Sig_ZA]

Right, so I get the apparently standard: "FATAL ERROR: register_globals is disabled in php.ini, please enable it!"

 

After searching the forums I found this patch: Register Globals V 1.5 Patch.

 

The documention is very good, but I still have a question.

Must you apply the patch once you have installed OSC (ie. enabled register_globals) or can you install the patch before the installation. The reason I ask is that I can't find some of the files that need patching in the "install_mosCommerce" folder.

 

Thanks

[Stacie.diyer]

I've used that "patch" it works well. You don't need to install anything before hand just unzip and copy the catalog folder onto your ftp.

(the pack that is given also has a Read_me file if you need help)

[Stacie.diyer]

correction you need to download and install Register Globals v1.5 first before applying the file.

[♥Vger]

Remember this - most of the 3000+ osCommerce contributions are not written to work with Register Globals 'off', so you'll be severely limited in what you can do.

 

Either turn Register Globals 'on' with .htaccess (Apache servers only), or else put a file called php.ini in the root of your web and inside the admin folder with this in the file: Register Globals = On

 

Vger

[Sig_ZA]

Remember this - most of the 3000+ osCommerce contributions are not written to work with Register Globals 'off', so you'll be severely limited in what you can do.

 

Either turn Register Globals 'on' with .htaccess (Apache servers only), or else put a file called php.ini in the root of your web and inside the admin folder with this in the file: Register Globals = On

 

Vger

Do I need to turn globals on for the whole website, or can I limit it to the OSC directory?

I've heard that having globals on is a security risk, how serious of a threat is it?

Thnx

[Guest]

...I can't find some of the files that need patching in the "install_mosCommerce" folder.

The OSC "install" directory is not required after installation and should be removed.

 

The docs for the register globals patch mention this - just ignore any ref's to any files in the "install" directory if they do not exist.

 

By the way, I disagree with what Vger implies - Although most contributions are indeed written without regard for register globals issues, you should find that MOST contributions will actually work ok with register globals disabled. That is the experience I have had, anyway. Of those contributions that do not work, you can get them working very easily with (usually) very small modifications. Also, I have seen register globals fixes for some other contributions on this forum. To help you further, the register globals patch contain a text file that explains what you need to do if you are having problems.

 

Rich.