View Single Post
Old
  (#7 (permalink))
ldesign
Registered User
ldesign is on a distinguished road
 
ldesign's Avatar
 
Status: Offline
Posts: 251
Join Date: Feb 2004
Location: Colorado
Rep Power: 42
02-22-2007, 07:52 PM

I'll back Jim on this one. Distributed Php scripts should not depend on register globals. Even though a lot of my old scripts - the ones I wrote three to four years ago do* - it really is best to get away from that. Automatically assigning POSTED (from a form) and passed GET (from a hyper link) variables into the local variable scope could create havoc (like database injection, - i.e., your database gets deleted). It makes the hackers' job too easy.

(* I have actually made the needed conversions on most, if not all of my own scripts. It's not all that hard, and it is definitely something the OScommerce folks ought to have done by now.)

The earlier suggestion to use a php.ini file might work for you, and it might even solve both problems - for now. My guess is that your first problem could also be a register_globals problem (When register_globals is off, scripts that depend on it will often do nothing when a form is entered.)

Chuck
   
Reply With Quote