Coppermine 1.3.2 use register_globals how: ON or OFF ? Coppermine 1.3.2 use register_globals how: ON or OFF ?
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Coppermine 1.3.2 use register_globals how: ON or OFF ?

Started by rob222, October 26, 2004, 11:56:13 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

rob222

I belief that it use ON; but OFF i have read on some newsgroup that is preferable.
Will be one characteristic future?

Is it possible now to use coppermine with php.in register_globals=OFF ?

Tranz

I believe you can use CPG with register globals off because the variables are now being called by $HTTP_POST_VARS['var']

It is more secure to turn off register globals.

Joachim Müller

TranzNDance is right - coppermine doesn't need register gobals to be turned on, the setting can be on or off - coppermine will work either way. For security reasons, you should set it to "off", that's true (but not related to coppermine at all).

Joachim