From mboxrd@z Thu Jan  1 00:00:00 1970
From: Franky Van Liedekerke <liedekef@telenet.be>
Date: Thu, 07 Aug 2008 13:59:22 +0000
Subject: Re: Quick hack to get mlmmj to work in PHP 5
Message-Id: <20080807155922.6f30d638@franky>
List-Id: <mlmmj.mlmmj.org>
References: <45CB89DA-8EDA-4BB9-B500-967D0245BB71@phporaclehosting.com>
In-Reply-To: <45CB89DA-8EDA-4BB9-B500-967D0245BB71@phporaclehosting.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: mlmmj@mlmmj.org

On Thu, 07 Aug 2008 15:34:05 +0200
Christian Laursen <xi@borderworlds.dk> wrote:

> Gareth Fiford <gareth@phporaclehosting.com> writes:
> 
> > On 7 Aug 2008, at 08:38, Christian Laursen <xi@borderworlds.dk>
> > wrote:
> >
> >> Gareth Fiford <gareth@phporaclehosting.com> writes:
> >>
> >>> Quick hack to get php user and admin to work in PHP5
> >>
> >> [snip]
> >>
> >> Or you could probably just enable register_globals in your virtual
> >> host configuration.
> >
> > Register globals is a security no no
> 
> Yes, but disabling register_globals and implementing the same thing
> yourself is just as bad (Actually I think it is worse).
> 

I don't think anything that drastic is needed for the php interface.
Just change any occurence of $HTTP_GET_VARS into $_GET, $HTTP_POST_VARS
into $_POST and $HTTP_SERVER_VARS into $_SERVER. It requires some
editing, but is the best way to go. If people are not willing to do
this editing, download it from here:
http://www.e-dynamics.be/programs/php_interface.tar.gz

Franky