RE: Security Proposal

This message was sent from: Development
http://forums.oscommerce.com/viewtopic.php?p=184246#184246
----------------------------------------------------------------

While on the topic of security, in a thread that appears to be alive, can anyone direct me to a thread, page, idea, etc. that discusses the efforts to modify osC to operate with register globals = off? I know this is set for MS3 or MS4, however, I'd like to expedite the process in my [hacked] version of osC.

Any thoughts out there?  In another [perceived dead] thread there were statements that you're maintianing register globals = on to preserve PHP3 compatitibliy - I run in PHP 4.2 so this is not an issue for me.  Being the paranoid fool that I am, though, Register globals = on  is an issue.

TIA