#24401 [Com]: register globals does not work correctly??!!
ID: 24401 Comment by: php at nexornet dot com Reported By: eero at jlug dot org Status: Critical Bug Type: *General Issues Operating System: Linux PHP Version: 5.0.0b2-dev New Comment: It's NOT DANGEROUS by itself. If you use register globals, it depends on your programming if it is insecure or not. I'm having this exact issue on php5.0.0b1 on redhat 7.3 with apache2, waiting patiently for it to be fixed. Viva Register Globals! Previous Comments: [2003-07-07 14:02:43] dlunn at mts dot net Isn't register_globals dangerous? Or has that been changed with PHP 5? [2003-07-07 09:03:21] [EMAIL PROTECTED] Making this "Critical", globals are not registered at all, regardless what register_globals is set to. [2003-07-04 11:42:54] [EMAIL PROTECTED] Bug #24498 was marked as bogus as it is the same issue. Verified it here. [2003-07-04 02:26:23] eero at jlug dot org Tested with latest cvs-version (php5-200307040530 ), 5.0.0b2-dev sama bug still exists. [2003-07-04 01:53:55] [EMAIL PROTECTED] Try the latest PHP 5 snapshot from http://snaps.php.net/ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/24401 -- Edit this bug report at http://bugs.php.net/?id=24401&edit=1
#24401 [Com]: register globals does not work correctly??!!
ID: 24401
Comment by: dlunn at mts dot net
Reported By: eero at jlug dot org
Status: Critical
Bug Type: *General Issues
Operating System: Linux
PHP Version: 5.0.0b2-dev
New Comment:
Isn't register_globals dangerous? Or has that been changed with PHP 5?
Previous Comments:
[2003-07-07 09:03:21] [EMAIL PROTECTED]
Making this "Critical", globals are not registered at all,
regardless what register_globals is set to.
[2003-07-04 11:42:54] [EMAIL PROTECTED]
Bug #24498 was marked as bogus as it is the same issue.
Verified it here.
[2003-07-04 02:26:23] eero at jlug dot org
Tested with latest cvs-version (php5-200307040530 ),
5.0.0b2-dev sama bug still exists.
[2003-07-04 01:53:55] [EMAIL PROTECTED]
Try the latest PHP 5 snapshot from http://snaps.php.net/
[2003-07-03 15:38:13] Colin_Witt at baylor dot edu
Same issue here with PHP 5.0.0b1 running on Mac OS X
10.2.6.
php.ini file says register_globals = On
phpinfo() says register_globals On On
http://localhost/index.php?id=1234 should create $id
with value 1234, but it does not. If I add a check at
the top of the script like this, it works:
if ($id == "") { $id = $_GET['id']; }
But there are other GET variables being passed elsewhere
in the app, and they too are not properly registered.
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/24401
--
Edit this bug report at http://bugs.php.net/?id=24401&edit=1
#24401 [Com]: register globals does not work correctly??!!
ID: 24401
Comment by: Colin_Witt at baylor dot edu
Reported By: eero at jlug dot org
Status: Open
Bug Type: *General Issues
Operating System: Linux
PHP Version: 5.0.0b1 (beta1)
New Comment:
Same issue here with PHP 5.0.0b1 running on Mac OS X
10.2.6.
php.ini file says register_globals = On
phpinfo() says register_globals On On
http://localhost/index.php?id=1234 should create $id
with value 1234, but it does not. If I add a check at
the top of the script like this, it works:
if ($id == "") { $id = $_GET['id']; }
But there are other GET variables being passed elsewhere
in the app, and they too are not properly registered.
Previous Comments:
[2003-07-03 03:41:06] fuhaha at seoul dot com
php5.0b1 on linux machine. (redhat 9.0)
setted register_globals=On
and phpinfo() check result is register_globals On On
it has problem.
do not recognize GET values, and POST values.
why happend this problem ?
help me plz.
[2003-06-30 08:59:56] philippe dot nonn at cgeyDOT dot com
Hi,
it seems that register_globals don't even work on the Windows version.
When I call a php form which call phpinfo() with parameters (like
phpinfo.php?foo=test), there is non global variable $foo.
The only way to get the $foo variable is to use get['foo']
Philippe
[2003-06-30 06:34:34] petrich at tronic-media dot com
Hi,
still have the problem;
(register_globals = On in php.ini are ignored, ServerApi = Apache2)
Configure String:
./configure --disable-all
--with-apxs2=/mnt/60giga/samba/public/www/apache2/bin/apxs
Hans-Jürgen Petrich
[2003-06-30 06:22:57] eero at jlug dot org
Now compiled with ./configure --with-mysql
--with-apxs=/home/apache/bin/apxs and problems still exists.
[2003-06-30 06:01:28] [EMAIL PROTECTED]
1. Drop this:
export CFLAGS="-march=athlon -O3 -pipe -fomit-frame-pointer"
2. Using /usr/lib as path to ANY php configure option is incorrect (use
/usr instead)
3. Remove following configure options:
--enable-versioning
--enable-inline-optimization
4. Try this configure line instead:
# rm config.cache
# ./configure --disable-all --with-apxs=home/apache/bin/apxs
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/24401
--
Edit this bug report at http://bugs.php.net/?id=24401&edit=1
#24401 [Com]: register globals does not work correctly??!!
ID: 24401 Comment by: fuhaha at seoul dot com Reported By: eero at jlug dot org Status: Open Bug Type: *General Issues Operating System: Linux PHP Version: 5.0.0b1 (beta1) New Comment: php5.0b1 on linux machine. (redhat 9.0) setted register_globals=On and phpinfo() check result is register_globals On On it has problem. do not recognize GET values, and POST values. why happend this problem ? help me plz. Previous Comments: [2003-06-30 08:59:56] philippe dot nonn at cgeyDOT dot com Hi, it seems that register_globals don't even work on the Windows version. When I call a php form which call phpinfo() with parameters (like phpinfo.php?foo=test), there is non global variable $foo. The only way to get the $foo variable is to use get['foo'] Philippe [2003-06-30 06:34:34] petrich at tronic-media dot com Hi, still have the problem; (register_globals = On in php.ini are ignored, ServerApi = Apache2) Configure String: ./configure --disable-all --with-apxs2=/mnt/60giga/samba/public/www/apache2/bin/apxs Hans-Jürgen Petrich [2003-06-30 06:22:57] eero at jlug dot org Now compiled with ./configure --with-mysql --with-apxs=/home/apache/bin/apxs and problems still exists. [2003-06-30 06:01:28] [EMAIL PROTECTED] 1. Drop this: export CFLAGS="-march=athlon -O3 -pipe -fomit-frame-pointer" 2. Using /usr/lib as path to ANY php configure option is incorrect (use /usr instead) 3. Remove following configure options: --enable-versioning --enable-inline-optimization 4. Try this configure line instead: # rm config.cache # ./configure --disable-all --with-apxs=home/apache/bin/apxs [2003-06-30 05:43:07] eero at jlug dot org and following settings are also on: register_globals = On register_long_arrays = On register_argc_argv = On echo $QUERY_STRING also stops working and so. The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/24401 -- Edit this bug report at http://bugs.php.net/?id=24401&edit=1
#24401 [Com]: register globals does not work correctly??!!
ID: 24401 Comment by: philippe dot nonn at cgeyDOT dot com Reported By: eero at jlug dot org Status: Open Bug Type: *General Issues Operating System: Linux PHP Version: 5.0.0b1 (beta1) New Comment: Hi, it seems that register_globals don't even work on the Windows version. When I call a php form which call phpinfo() with parameters (like phpinfo.php?foo=test), there is non global variable $foo. The only way to get the $foo variable is to use get['foo'] Philippe Previous Comments: [2003-06-30 06:34:34] petrich at tronic-media dot com Hi, still have the problem; (register_globals = On in php.ini are ignored, ServerApi = Apache2) Configure String: ./configure --disable-all --with-apxs2=/mnt/60giga/samba/public/www/apache2/bin/apxs Hans-Jürgen Petrich [2003-06-30 06:22:57] eero at jlug dot org Now compiled with ./configure --with-mysql --with-apxs=/home/apache/bin/apxs and problems still exists. [2003-06-30 06:01:28] [EMAIL PROTECTED] 1. Drop this: export CFLAGS="-march=athlon -O3 -pipe -fomit-frame-pointer" 2. Using /usr/lib as path to ANY php configure option is incorrect (use /usr instead) 3. Remove following configure options: --enable-versioning --enable-inline-optimization 4. Try this configure line instead: # rm config.cache # ./configure --disable-all --with-apxs=home/apache/bin/apxs [2003-06-30 05:43:07] eero at jlug dot org and following settings are also on: register_globals = On register_long_arrays = On register_argc_argv = On echo $QUERY_STRING also stops working and so. [2003-06-30 05:34:33] eero at jlug dot org php5 compiled with following on Linux, Linux lnx 2.4.18-18.7.x with athlon 1400 processor export CFLAGS="-march=athlon -O3 -pipe -fomit-frame-pointer" ./configure --with-mysql --with-bz2 --with-gd --with-jpeg-dir=/usr/lib --with-png-dir=/usr/lib --with-gettext --enable-inline-optimization \ --with-apxs=/home/apache/bin/apxs --with-pgsql --with-zlib-dir=/usr/lib --enable-ftp --enable-sockets --with-ming --with-mm --with-pdflib \ --enable-mime-magic --enable-dio --enable-calendar --enable-bcmath --enable-wddx --with-xmlrpc --with-expat --with-dom --with-unixODBC \ --with-freetype --enable-gd-native-ttf --with-gettext --with-gmp --enable-mbstring --enable-mbregex --enable-xslt --with-xslt-sablot \ --with-sablot-js --enable-shmop --enable-versioning And register_globals is on and showing in phpinfo() The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/24401 -- Edit this bug report at http://bugs.php.net/?id=24401&edit=1
#24401 [Com]: register globals does not work correctly??!!
ID: 24401 Comment by: petrich at tronic-media dot com Reported By: eero at jlug dot org Status: Open Bug Type: *General Issues Operating System: Linux PHP Version: 5.0.0b1 (beta1) New Comment: Hi, still have the problem; (register_globals = On in php.ini are ignored, ServerApi = Apache2) Configure String: ./configure --disable-all --with-apxs2=/mnt/60giga/samba/public/www/apache2/bin/apxs Hans-Jürgen Petrich Previous Comments: [2003-06-30 06:22:57] eero at jlug dot org Now compiled with ./configure --with-mysql --with-apxs=/home/apache/bin/apxs and problems still exists. [2003-06-30 06:01:28] [EMAIL PROTECTED] 1. Drop this: export CFLAGS="-march=athlon -O3 -pipe -fomit-frame-pointer" 2. Using /usr/lib as path to ANY php configure option is incorrect (use /usr instead) 3. Remove following configure options: --enable-versioning --enable-inline-optimization 4. Try this configure line instead: # rm config.cache # ./configure --disable-all --with-apxs=home/apache/bin/apxs [2003-06-30 05:43:07] eero at jlug dot org and following settings are also on: register_globals = On register_long_arrays = On register_argc_argv = On echo $QUERY_STRING also stops working and so. [2003-06-30 05:34:33] eero at jlug dot org php5 compiled with following on Linux, Linux lnx 2.4.18-18.7.x with athlon 1400 processor export CFLAGS="-march=athlon -O3 -pipe -fomit-frame-pointer" ./configure --with-mysql --with-bz2 --with-gd --with-jpeg-dir=/usr/lib --with-png-dir=/usr/lib --with-gettext --enable-inline-optimization \ --with-apxs=/home/apache/bin/apxs --with-pgsql --with-zlib-dir=/usr/lib --enable-ftp --enable-sockets --with-ming --with-mm --with-pdflib \ --enable-mime-magic --enable-dio --enable-calendar --enable-bcmath --enable-wddx --with-xmlrpc --with-expat --with-dom --with-unixODBC \ --with-freetype --enable-gd-native-ttf --with-gettext --with-gmp --enable-mbstring --enable-mbregex --enable-xslt --with-xslt-sablot \ --with-sablot-js --enable-shmop --enable-versioning And register_globals is on and showing in phpinfo() [2003-06-30 05:25:36] petrich at tronic-media dot com Upsss, >on my machine (linux 7.2 / Kernel 2.4.9-21) with php5b1 the same linux 7.2 == Red-Hat 7.2 Hans-Jürgen Petrich The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at http://bugs.php.net/24401 -- Edit this bug report at http://bugs.php.net/?id=24401&edit=1
#24401 [Com]: register globals does not work correctly??!!
ID: 24401 Comment by: petrich at tronic-media dot com Reported By: eero at jlug dot org Status: Feedback Bug Type: *General Issues Operating System: Linux PHP Version: 5.0.0b1 (beta1) New Comment: Upsss, >on my machine (linux 7.2 / Kernel 2.4.9-21) with php5b1 the same linux 7.2 == Red-Hat 7.2 Hans-Jürgen Petrich Previous Comments: [2003-06-30 05:23:41] petrich at tronic-media dot com Hi, on my machine (linux 7.2 / Kernel 2.4.9-21) with php5b1 the same Problem. In php.ini register_globals = On and in .htaccess also php_flag register_globals on phpinfo() says: register_globals On On Configured with: './configure' '--prefix=/usr' '--with-mysql=/usr' '--with-prefix=/usr' '--with-zlib' --enable-force-cgi-redirect Perhaps that will help... Greetings Hans-Jürgen Petrich [2003-06-30 04:43:06] [EMAIL PROTECTED] Works fine here... what does phpinfo() say about register_globals? [2003-06-30 04:39:04] eero at jlug dot org ilmoitustaulu.php contains like that: if($action == "add") do_something(); else do_something2(); But $action contains is not passed to to ilmoitustaulu.php [2003-06-30 04:13:55] [EMAIL PROTECTED] Not enough information was provided for us to be able to handle this bug. Please re-read the instructions at http://bugs.php.net/how-to-report.php If you can provide more information, feel free to add it to this bug and change the status back to "Open". Thank you for your interest in PHP. [2003-06-30 03:38:14] eero at jlug dot org Description: Compiled php5 on my machine, and setted register_globals=On and this kind of urls does not work http://server.foo/ilmoitustaulu.php?action=foo $action is not visible in ilmoitustaulu.php. -- Edit this bug report at http://bugs.php.net/?id=24401&edit=1
#24401 [Com]: register globals does not work correctly??!!
ID: 24401 Comment by: petrich at tronic-media dot com Reported By: eero at jlug dot org Status: Feedback Bug Type: *General Issues Operating System: Linux PHP Version: 5.0.0b1 (beta1) New Comment: Hi, on my machine (linux 7.2 / Kernel 2.4.9-21) with php5b1 the same Problem. In php.ini register_globals = On and in .htaccess also php_flag register_globals on phpinfo() says: register_globals On On Configured with: './configure' '--prefix=/usr' '--with-mysql=/usr' '--with-prefix=/usr' '--with-zlib' --enable-force-cgi-redirect Perhaps that will help... Greetings Hans-Jürgen Petrich Previous Comments: [2003-06-30 04:43:06] [EMAIL PROTECTED] Works fine here... what does phpinfo() say about register_globals? [2003-06-30 04:39:04] eero at jlug dot org ilmoitustaulu.php contains like that: if($action == "add") do_something(); else do_something2(); But $action contains is not passed to to ilmoitustaulu.php [2003-06-30 04:13:55] [EMAIL PROTECTED] Not enough information was provided for us to be able to handle this bug. Please re-read the instructions at http://bugs.php.net/how-to-report.php If you can provide more information, feel free to add it to this bug and change the status back to "Open". Thank you for your interest in PHP. [2003-06-30 03:38:14] eero at jlug dot org Description: Compiled php5 on my machine, and setted register_globals=On and this kind of urls does not work http://server.foo/ilmoitustaulu.php?action=foo $action is not visible in ilmoitustaulu.php. -- Edit this bug report at http://bugs.php.net/?id=24401&edit=1
