Re: Quick hack to get mlmmj to work in PHP 5

[Thomas Goirand <thomas@goirand.fr>]

Gareth Fiford wrote:
> Register globals is a security no no
>
> You don't need to disable globals for this to work
>
> No one is going to enable globals on any of my servers

I would rather add a very small .htaccess or a directive in
/etc/apache2, with the proper php directive to enable register globals.
That is much much better than modifying files of a package that will be
overwritten at the next upgrade. I don't see why using "Register
globals" only for the faulty script is less safer than your hack (in
fact, your hack is even more dangerous, as it's badly written, it
forgets about things in sessions for example, so it's not fully
compatible with enabling register globals).

> Http_post_vars depricated on favour of _POST
> 
> Same for get

And both are to be avoided, it's been YEARS that I recommend using
$_REQUEST instead so you don't need to bother if the variables are
coming from GET, POST, or even the cookies.

> Sent from my iPhone

No one is going to enable an iPhone on any of my servers :)

Thomas