RE: Security Proposal

PLMresearch <[email protected]>
Newsgroups gmane.comp.web.oscommerce.devel
Message-ID <369e9333f51a178b6f30661055e5d803@osCommerce-Forums>
This message was sent from: Development
http://forums.oscommerce.com/viewtopic.php?p=184259#184259
----------------------------------------------------------------

You are corrrect.  osC does not work if register globals = off, which is the basis of my question.  Presumably, there are certain functions that require register global = on.  I'm guessing they pass varibles without using the HTTP_VARS stack.  I'm hoping someone can provide a laundry list of places where this might occur so that I can trudge through and fix it.

I'm guessing it's not going to be a fun task, but just the same....
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.