|
02-22-2007, 07:52 PM
I'll back Jim on this one. Distributed Php scripts should not depend on register globals. Even though a lot of my old scripts - the ones I wrote three to four years ago do* - it really is best to get away from that. Automatically assigning POSTED (from a form) and passed GET (from a hyper link) variables into the local variable scope could create havoc (like database injection, - i.e., your database gets deleted). It makes the hackers' job too easy.
(* I have actually made the needed conversions on most, if not all of my own scripts. It's not all that hard, and it is definitely something the OScommerce folks ought to have done by now.)
The earlier suggestion to use a php.ini file might work for you, and it might even solve both problems - for now. My guess is that your first problem could also be a register_globals problem (When register_globals is off, scripts that depend on it will often do nothing when a form is entered.)
Chuck
|