[TYPO3-core] RFC: Bugfix: #10417: Remove debugging code from sysext t3skin

Marcus Krause marcus#exp2009 at t3sec.info
Thu Feb 12 09:44:37 CET 2009


Hi!

This is an SVN patch request.

Type: bugfix

Branches: 4-1, 4-2, trunk

Bugtracker reference: http://bugs.typo3.org/view.php?id=10417


Problem:
Class Print_a_class (debuglib.php) provides debugging functionality
(show variables, etc..). It's not needed for sysext t3skin to work, nor
it's used at all throughout the Core.
I guess PHP and TYPO3 do provide enough possibilities to debug code;
additional unmaintained code is not needed.

Furthermore, it's a potential security flaw as it puts request
parameters into global scope. See Print_a_class::show_vars(). (=
simulates register_global)


Solution:
Get rid of it before someone actually uses this code.



Marcus.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 10417.diff
Type: text/x-diff
Size: 20214 bytes
Desc: not available
Url : http://lists.netfielders.de/pipermail/typo3-team-core/attachments/20090212/a7e01f54/attachment-0001.diff 


More information about the TYPO3-team-core mailing list