From owner-freebsd-questions@FreeBSD.ORG  Sat Oct  9 03:58:32 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E464D16A4CE
	for <freebsd-questions@freebsd.org>;
	Sat,  9 Oct 2004 03:58:32 +0000 (GMT)
Received: from o2.hostbaby.com (o2.hostbaby.com [208.187.29.121])
	by mx1.FreeBSD.org (Postfix) with SMTP id 935BF43D1D
	for <freebsd-questions@freebsd.org>;
	Sat,  9 Oct 2004 03:58:32 +0000 (GMT)	(envelope-from ceo@l-i-e.com)
Received: (qmail 71884 invoked by uid 1001); 9 Oct 2004 03:58:38 -0000
Received: from 24.148.51.115
        (SquirrelMail authenticated user ceo@l-i-e.com);
        by www.l-i-e.com with HTTP;
        Fri, 8 Oct 2004 20:58:38 -0700 (PDT)
Message-ID: <2545.24.148.51.115.1097294318.squirrel@www.l-i-e.com>
In-Reply-To: <44A1FD0A-1931-11D9-A663-000A959EB894@ieee.org>
References: 
    <2D8BB15C7B5C214F81C32D3A83B3273601676FB9@idbexc01.americas.cpqcorp.net>
    <EB7AA45A-17CB-11D9-897B-000A959EB894@ieee.org>
    <41644861.1060000@wingfoot.org>
    <44A1FD0A-1931-11D9-A663-000A959EB894@ieee.org>
Date: Fri, 8 Oct 2004 20:58:38 -0700 (PDT)
From: "Richard Lynch" <ceo@l-i-e.com>
To: "Alan Curtis" <acurtis@ieee.org>
User-Agent: Hostbaby Webmail
X-Mailer: Hostbaby Webmail
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
cc: freebsd-questions@freebsd.org
Subject: Re: phpwiki
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: ceo@l-i-e.com
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 09 Oct 2004 03:58:33 -0000

Alan Curtis wrote:
> 7. followed the instructions at
> http://phpwiki.sourceforge.net/phpwiki/FrequentlyAskedQuestions
> and added
>
> foreach ($_REQUEST as $k => $v) $$k = $v;

At this point, you might as well use .htaccess to turn register_globals
back "ON" for phpwiki, since you have effectively un-done the security of
turning register_globals "OFF" for this application...

Or fix the Wiki to *NOT* rely on register_globals in the first place.

You can find more info about this issue by searching on http://php.net for
register_globals

-- 
Like Music?
http://l-i-e.com/artists.htm