Re: phpweb and autotool woes

On Sat, July 29, 2006 9:50 pm, Justus Piater wrote:
> Hi -
>
> I've installed refdb-0.9.7 from source and started to play with the
> PHP interface, and it gladly accepts any bogus logins and nonexistent
> databases without complaining. Before digging into the code, I noticed
> that the PHP code has evolved quite a bit since the latest release, so
> I decided to try refdb-svn.

The latest svn version of phpweb is largely a cosmetic change (from the
point of view of the php) from what was there for most of the last year or
so. As far as I am aware, there were no php coding changes. I got rid of
the tables and made the html largely xhtml 1.0 conformant.

As Markus said, I'm in the middle of a fundamental rewrite of the php
version. This new version works with the default php.ini (i.e.
particularly register_globals=off). But it isn't in the SVN yet because it
is no where near being modular year, has not been checked for security,
and is still subject to complete rewrites as I work my way through the
various operations. As soon as I have roughed in the complete set of
essential operations and checked for security issues, I'll put it in svn.

> About phpweb: It requires a rather specific php.ini setup for session
> handling. For example, it requires register_globals to be On, which is
> against the recommendations. Other settings may clash with
> requirements by other sites on the same server. What would it take to
> remove these restrictive session-handling requirements
> (register_globals, cookies, auto_start)?

The register_globals=on setting is there because the current svn version
is not declaring session variables. It is a simple matter to change this,
though a bit of typing. You need to declare all the form variables as
session variables and then you can turn register_globals=off. I'm not sure
what you you mean about the cookies and auto-start. Weren't they default
settings? I guess no longer remember.

>
> Thanks,
> Justus
>
> --
> Justus H. Piater, Ph.D.         http://www.montefiore.ulg.ac.be/~piater/
> Institut Montefiore, B28        Phone: +32-4-366-2279
> Université de Liège, Belgium    Fax:   +32-4-366-2620
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share
> your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Refdb-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/refdb-users
>


-- 
Daniel Paul O'Donnell
Director, Digital Medievalist Project (http://www.digitalmedievalist.org/)
Associate Professor of English
University of Lethbridge
Lethbridge AB T1K 3M4
Tel. +1 (403) 329-2377
Fax. +1 (403) 382-7191

(@webmail)


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV