From owner-freebsd-questions Sat Jun 8 6: 7:16 2002 Delivered-To: freebsd-questions@freebsd.org Received: from tartarus.telenet-ops.be (tartarus.telenet-ops.be [195.130.132.34]) by hub.freebsd.org (Postfix) with ESMTP id A963E37B407 for ; Sat, 8 Jun 2002 06:07:12 -0700 (PDT) Received: from localhost (localhost.localdomain [127.0.0.1]) by tartarus.telenet-ops.be (Postfix) with SMTP id 9E65DDC4CC for ; Sat, 8 Jun 2002 15:07:11 +0200 (CEST) Received: from fortuna.home.paeps.cx (D5768644.kabel.telenet.be [213.118.134.68]) by tartarus.telenet-ops.be (Postfix) with ESMTP id 6623CDC2B1 for ; Sat, 8 Jun 2002 15:07:11 +0200 (CEST) Received: from juno.home.paeps.cx (juno [10.0.0.2]) by fortuna.home.paeps.cx (Postfix) with ESMTP id 43E19945 for ; Sat, 8 Jun 2002 15:07:11 +0200 (CEST) Received: by juno.home.paeps.cx (Postfix, from userid 1001) id ECDAC555; Sat, 8 Jun 2002 15:07:10 +0200 (CEST) Date: Sat, 8 Jun 2002 15:07:10 +0200 From: Philip Paeps To: freebsd-questions@FreeBSD.ORG Subject: Re: FreeBSD Apache error ?! Message-ID: <20020608130710.GP3924@juno.paeps.cx> Mail-Followup-To: freebsd-questions@FreeBSD.ORG References: <000801c20ed0$ee22f510$017ba8c0@XTREME> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: inline In-Reply-To: <000801c20ed0$ee22f510$017ba8c0@XTREME> User-Agent: Mutt/1.3.99i X-Message-Flag: Get yourself a real mail client. Try Mutt: Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On 2002-06-08 11:43:36, Syndicate wrote: [...] > I'm running Apache/1.3.24 (Unix) PHP/4.2.0 and I also ran the latest version > of PHP but changed because i tought that was the problem .. Same problem :-( > U can find the source code here : http://users.pandora.be/wout/php.txt and the > file running on a LinuxBox here : http://virtual.rootbash.be/test.php . > I got it on a FreeBSD box : http://xirius.ath.cx:8080/syndicate/login.php . > All the same files with login/pass : admin/abc123 . Recent versions of PHP set register_globals off by default in php.ini. The $PHP_AUTH_USER and $PHP_AUTH_PW variables simply don't exist. Use $_SERVER["PHP_AUTH_USER"] and $_SERVER["PHP_AUTH_PW"] respectively, instead. I recommend you switch the register_globals off on the Linux machines too. Superglobals are more secure, and give you more control over what your users are pumping into your scripts. - Philip -- Philip Paeps philip@paeps.cx http://www.paeps.cx/ +32 486 114 720 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message