Boston Linux & Unix (BLU) Home | Calendar | Mail Lists | List Archives | Desktop SIG | Hardware Hacking SIG
Wiki | Flickr | PicasaWeb | Video | Maps & Directions | Installfests | Keysignings
Linux Cafe | Meeting Notes | Linux Links | Bling | About BLU

BLU Discuss list archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

PHP question



On 3/30/07, Nathan Meyers <nmeyers at javalinux.net> wrote:

> As I vaguely recall, some variables access patterns changed for security
> reasons - you could no longer request them by their naked property names
> but instead as elements of a properties hash. There is probably a global
> PHP configuration flag to reenable the old behavior for pages that are
> written to rely on it.
>

The old behavior is dangerous, and would leave the website
vulnerable to compromise in the presence of sloppy PHP code.
So enabling the old behavior is not an option.


-- 
John Abreau / Executive Director, Boston Linux & Unix
GnuPG KeyID: 0xD5C7B5D9 / Email: abreauj at gmail.com
GnuPG FP: 72 FB 39 4F 3C 3B D6 5B E0 C8 5A 6E F1 2C BE 99

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.





BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!



Boston Linux & Unix / webmaster@blu.org