patchphpGroupWare - Patches: patch #3923, [Fix] Compatibility with...

 
 

You are not allowed to post comments on this tracker with your current authentification level.

patch #3923: [Fix] Compatibility with register_globals off

Submitted by:  Doug Kelly <dougk_ff7>
Submitted on:  Wed 20 Apr 2005 06:51:13 AM UTC  
 
Category: registrationPriority: 6
Item Group: NoneStatus: None
Privacy: PublicAssigned to: None
Open/Closed: Open

Wed 20 Apr 2005 06:51:13 AM UTC, original submission:

Here's a patch to allow registration to work without register_globals on. It's pretty hackish, but I did design it to try to prevent SQL injection. Perhaps someone will have a better idea and some cleanup for this, though--I'm not terribly familiar with the phpGW source. Most likely, the little function I use to do the replacement on the variables is either somewhere else already, or there's a better way to do it. Either way, it will NOT break when fed a single-quote (so no SQL injection), however it will die when fed a backslash (though not allow exploitation, to the best of my knowledge).

Doug Kelly <dougk_ff7>

 

Attached Files
file #8696:  patch-fix-register_globals-dougk_ff7.diff added by dougk_ff7 (2kB - application/octet-stream - [Fix] register_globals off compatibility)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follows 1 latest change.

Date Changed By Updated Field Previous Value => Replaced By
Wed 20 Apr 2005 06:51:14 AM UTCdougk_ff7Attached File-=>Added patch-fix-register_globals-dougk_ff7.diff, #4477

Back to the top


Powered by Savane 3.1-cleanup