patchphpGroupWare - Patches: patch #3923, [Fix] Compatibility with...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

patch #3923: [Fix] Compatibility with register_globals off

Submitted by:  Doug Kelly <dougk_ff7>
Submitted on:  Wed 20 Apr 2005 06:51:13 AM UTC  
 
Category:  registration Priority:  6
Item Group:  None Status:  None
Privacy:  Public Assigned to:  None
Open/Closed:  Open

Wed 20 Apr 2005 06:51:13 AM UTC, original submission:

Here's a patch to allow registration to work without register_globals on. It's pretty hackish, but I did design it to try to prevent SQL injection. Perhaps someone will have a better idea and some cleanup for this, though--I'm not terribly familiar with the phpGW source. Most likely, the little function I use to do the replacement on the variables is either somewhere else already, or there's a better way to do it. Either way, it will NOT break when fed a single-quote (so no SQL injection), however it will die when fed a backslash (though not allow exploitation, to the best of my knowledge).

Doug Kelly <dougk_ff7>

 

Attached Files
file #8696:  patch-fix-register_globals-dougk_ff7.diff added by dougk_ff7 (2KiB - application/octet-stream - [Fix] register_globals off compatibility)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

 

 

Follows 1 latest change.

Date Changed by Updated Field Previous Value => Replaced by
2005-04-20 dougk_ff7 Attached File- => Added patch-fix-register_globals-dougk_ff7.diff, #4477

Back to the top


Powered by Savane 3.3