[TYPO3-v4] PHP register_globals and Ticket#2011121510000044

Steffen Müller typo3 at t3node.com
Thu Dec 15 13:52:06 CET 2011


Hi.

register_globals is a security PITA and is anyway deprecated in PHP 5.3 [1].

I'd suggest to let TYPO3 bootstrap die() if it is turned on. Hardcore 
solution, but effective. At least for 4.6 which relies on PHP 5.3.

[1] http://www.php.net/manual/en/ini.core.php#ini.register-globals


-- 
cheers,
Steffen

TYPO3 Blog: http://www.t3node.com/
Twitter: @t3node - http://twitter.com/t3node


More information about the TYPO3-project-v4 mailing list