[TYPO3-core] RFC #17250: Bug: BE ajax request fails on some systems with php 5.3

[Johannes Feustel]

Hi

Am 24.01.11 10:00, schrieb Ernesto Baschny [cron IT]:
>> This can't be the final solution, since depending on the ajaxID
>> parameter it is decided, if the script may execute without a user
>> (TYPO3_PROCEED_IF_NO_USER). If you just move init.php upwards, these
>> scripts won't work any more.
>
> That's true, but it looks like an "ugly hack" anyway to use
> TYPO3_PROCEED_IF_NO_USER in init.php. I think this could be an issue to
> be solved by the "init.php cleanup task force" (for 4.6) [1]. Something
> like this:
>
> - have (new?) init.php which only sets up the environment and starts the
> auto-loader,
> - have a second phase which will check the configuration, settings etc,
> which might lead to exceptions being thrown or decisions about the
> further route to be taken.
>
> Cheers,
> Ernesto
>
> [1]
> http://forge.typo3.org/projects/typo3v45-projects/wiki/Initphp_enhancements

So what about fixing this by using $_REQUEST with stripslashes() as in 
t3lib_div::_GP until init.php will be changed for 4.6? See v2.

Cheers,
Johannes
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 17250v2.diff
Type: application/pgp-keys
Size: 554 bytes
Desc: not available
URL: <http://lists.typo3.org/pipermail/typo3-team-core/attachments/20110124/c232b679/attachment.key>