Pixelpost

**Edwin** · April 2nd, 2008, 11:33 AM

Just did a new install of Pixelpost and noticed the following:

Quote:

PHP setting register_globals is disabled: Pixelpost will still run if this setting is enabled, but if possible, it is recommended that register_globals is disabled on your PHP install for security reasons.

It still works, but can it do harm when it is enabled?

**Roxy** · April 2nd, 2008, 4:26 PM

"When register_globals is enabled it opens the door to several exploits that can be carried out through injection methods which can easily render your data compromised."

http://www.surmunity.com/search-me/2...r-globals.html

**Edwin** · April 3rd, 2008, 9:29 AM

Kee, thanks

Leave it off

**FredFredrickson** · April 4th, 2008, 11:50 AM

The only fear of register globals is if the script was written by a poor programmer. Technically, the only danger is if people don't initialize their variables correctly.

**Kayla** · April 4th, 2008, 1:39 PM

Some applications seem to warn users by giving extra advice, even if it's not relevant to the program at the time.

Or they are just covering their bottoms if their program is exploited in the future.

"Well in the readme, we did warn you guyzzzz...."

April 2nd, 2008, 4:26 PM	#2 (permalink)
Roxy URB4N 5K1LLZ Super #1 Joined in Sep 2005 Lives in Orlando, FL Hosted on SH63 2,660 posts Gave thanks: 81 Thanked 128 times	"When register_globals is enabled it opens the door to several exploits that can be carried out through injection methods which can easily render your data compromised." http://www.surmunity.com/search-me/2...r-globals.html __________________ Roxanne Urban Roxy -Personal Blog SH63 - the best darn shared server!

April 3rd, 2008, 9:29 AM	#3 (permalink)
Edwin Surpassing Dutch Super #1 Joined in Sep 2004 Hosted on SH98 2,548 posts Gave thanks: 188 Thanked 45 times	Kee, thanks Leave it off __________________ sh98

April 4th, 2008, 11:50 AM	#4 (permalink)
FredFredrickson Senior Member Super #1 Joined in Nov 2003 Lives in New Hampshire 1,260 posts Gave thanks: 3 Thanked 27 times	The only fear of register globals is if the script was written by a poor programmer. Technically, the only danger is if people don't initialize their variables correctly. __________________

April 4th, 2008, 1:39 PM	#5 (permalink)
Kayla Marketing Maven Surpass Staff Joined in May 2003 Lives in Orlando 24,749 posts Gave thanks: 946 Thanked 806 times	Some applications seem to warn users by giving extra advice, even if it's not relevant to the program at the time. Or they are just covering their bottoms if their program is exploited in the future. "Well in the readme, we did warn you guyzzzz...." __________________ Follow Surpass on Twitter and Facebook Check out the Surpass Blog

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Rate This Thread
Rate This Thread:

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)