[TYPO3-v4] PHP register_globals and Ticket#2011121510000044

Steffen Müller typo3 at t3node.com
Thu Dec 15 17:48:56 CET 2011


Hi.

On 15.12.2011 14:28 Georg Ringer wrote:
> Am 15.12.2011 13:52, schrieb Steffen Müller:
>> I'd suggest to let TYPO3 bootstrap die() if it is turned on. Hardcore
>> solution, but effective. At least for 4.6 which relies on PHP 5.3.
>
> not possible and not an option
>

IMO it is.

if (inval(ini_get('register_globals')) > 0) die('');

What is the alternative?

if (isset($_REQUEST['GLOBALS'])) die('');


-- 
cheers,
Steffen

TYPO3 Blog: http://www.t3node.com/
Twitter: @t3node - http://twitter.com/t3node


More information about the TYPO3-project-v4 mailing list