Re: [PHP] SESSION array problems [THE REASON]

2008-10-02 Thread Daniel Brown
On Thu, Oct 2, 2008 at 1:53 PM, Jim Lucas <[EMAIL PROTECTED]> wrote: > > But, you must admit that your example above shows a very good reason that it > SHOULD break! Once again, it was a joke. I thought everyone would've realized that immediately. -- More full-root dedicated server package

Re: [PHP] SESSION array problems [THE REASON]

2008-10-02 Thread Jim Lucas
Daniel Brown wrote: > On Thu, Oct 2, 2008 at 12:57 PM, Jim Lucas <[EMAIL PROTECTED]> wrote: >> so long, farewell, bye bye > > If you say so. Do you realize how many websites are going to > break now? ;-P > > https://www.example.com/secure/shop.php?page=creditcardinfo.php > include($pag

Re: [PHP] SESSION array problems [THE REASON]

2008-10-02 Thread Micah Gersten
As was mine. Thank you, Micah Gersten onShore Networks Internal Developer http://www.onshore.com Daniel Brown wrote: > On Thu, Oct 2, 2008 at 1:14 PM, Micah Gersten <[EMAIL PROTECTED]> wrote: > >> That's probably a good thing: >> >> https://www.example.com/secure/shop.php?page=/etc/passwd >>

Re: [PHP] SESSION array problems [THE REASON]

2008-10-02 Thread tedd
At 12:50 PM -0400 10/2/08, Daniel Brown wrote: On Thu, Oct 2, 2008 at 12:30 PM, tedd <[EMAIL PROTECTED]> wrote: > I also have other servers where register_globals is OFF and I don't have the problem -- so indeed, that WAS the problem. It's INI_PERDIR, by the way, so you can set it wit

Re: [PHP] SESSION array problems [THE REASON]

2008-10-02 Thread Daniel Brown
On Thu, Oct 2, 2008 at 1:14 PM, Micah Gersten <[EMAIL PROTECTED]> wrote: > That's probably a good thing: > > https://www.example.com/secure/shop.php?page=/etc/passwd Yeah, it was a joke. -- More full-root dedicated server packages: Intel 2.4GHz/60GB/512MB/2TB $49.99/mo. Intel 3.06GHz/80GB/1

Re: [PHP] SESSION array problems [THE REASON]

2008-10-02 Thread Micah Gersten
That's probably a good thing: https://www.example.com/secure/shop.php?page=/etc/passwd :-) Thank you, Micah Gersten onShore Networks Internal Developer http://www.onshore.com Daniel Brown wrote: > On Thu, Oct 2, 2008 at 12:57 PM, Jim Lucas <[EMAIL PROTECTED]> wrote: > >> so long, farewe

Re: [PHP] SESSION array problems [THE REASON]

2008-10-02 Thread Jason Pruim
On Oct 2, 2008, at 1:01 PM, Daniel Brown wrote: On Thu, Oct 2, 2008 at 12:57 PM, Jim Lucas <[EMAIL PROTECTED]> wrote: so long, farewell, bye bye If you say so. Do you realize how many websites are going to break now? ;-P https://www.example.com/secure/shop.php?page=creditcardinfo.

Re: [PHP] SESSION array problems [THE REASON]

2008-10-02 Thread Daniel Brown
On Thu, Oct 2, 2008 at 12:57 PM, Jim Lucas <[EMAIL PROTECTED]> wrote: > > so long, farewell, bye bye If you say so. Do you realize how many websites are going to break now? ;-P https://www.example.com/secure/shop.php?page=creditcardinfo.php -- More full-root dedicated server package

Re: [PHP] SESSION array problems [THE REASON]

2008-10-02 Thread Jim Lucas
Daniel Brown wrote: > And fear not, Sergeant Sperling register_globals is deprecated > and is removed as of PHP6. > so long, farewell, bye bye -- Jim Lucas "Some men are born to greatness, some achieve greatness, and some have greatness thrust upon them." Twelfth Night,

Re: [PHP] SESSION array problems [THE REASON]

2008-10-02 Thread Daniel Brown
On Thu, Oct 2, 2008 at 12:30 PM, tedd <[EMAIL PROTECTED]> wrote: > > I also have other servers where register_globals is OFF and I don't have the > problem -- so indeed, that WAS the problem. It's INI_PERDIR, by the way, so you can set it with a local php.ini - or, if httpd.conf permits it, yo

Re: [PHP] SESSION array problems [THE REASON]

2008-10-02 Thread tedd
At 11:13 AM -0400 10/2/08, Andrew Ballard wrote: As several of us have suggested now, it's got to be register_globals. To all: Yes, register_globals was ON as reported by php-info and that was the problem. I also have other servers where register_globals is OFF and I don't have the problem -