Hi Bob,
On Mon, 24 Mar 2003, Bob Woodside wrote:
> Hooray! I'm glad to see they finally got your
> directory back online.
;-)
> I'll take a look at your php files later today or
> this evening.
>
> The one thing I noticed right away is that you
> probably want to make some changes to accommodate
> register_globals = off (the default setting in PHP 4.2,
> for security reasons) - e.g., in place of the lines that
> read
>
> $requested_file = basename($PHP_SELF);
>
> you'd want to do something like this:
>
> if (PHP_VERSION < 4.1) {
> $requested_file = basename($HTTP_SERVER_VARS[PHP_SELF]);
> } else {
> $requested_file = basename($_SERVER[PHP_SELF]);
> }
>
> (and $HTTP_SERVER_VARS has to be declared global).
All files are intended for php3. It is running at my
university and at my computer at home. But it should be not
a problem to switch to php4. I thought if the sites are
runable with php3 they should run with version 4 as well. I
restricted myself to use version 3 for porting purposes.
Before we put the files online we have to think about
security issues. Thats why I use the function sec_filename
for example.
> Since I can make piddling little changes like this
> in less time than it takes to describe them, I think we
> ought to look into putting this stuff in CVS.
Yes, that's right.
> Is it feasible to make a special test website directory
> on the FVWM CVS server that doesn't get pulled into
> distributions? Do you have CVS access, by the way?
No, I don't.
> (I'm just thinking of this as a convenient source
> repository, I'm not suggesting that we hook the test
> pages into the FVWM Web server, even as temporary
> undocumented URL's.) Or is there a better place to do it?
Just in case, I have sent a project request to
sourceforge.net for a modular webdesign project. It was
said to be answered within two days.
Regards, Uwe
--
+-----------------------------------------------------------
| Uwe Pross
| mailto:[EMAIL PROTECTED]
| http://www.tu-chemnitz.de/~uwp
+-----------------------------------------------------------
--
Visit the official FVWM web page at <URL:http://www.fvwm.org/>.
To unsubscribe from the list, send "unsubscribe fvwm-workers" in the
body of a message to [EMAIL PROTECTED]
To report problems, send mail to [EMAIL PROTECTED]
