Re: [Fez-users] Edit Schema replaces " with \" which corrupts schema

[Christiaan K. <c.k...@li...>]

Hi Lynette (and Bernadette and anyone else having this problem)

This is because we have changed any instance of $HTTP_POST_VARS (etc) to
$_POST in the code. This is more secure and the old way isn't supported in
future PHP versions (eg php6). However your config.inc.php still references
the old value. To fix this comment (or remove) this:

if (isset($_GET)) {
    $HTTP_POST_VARS = $_POST;
    $HTTP_GET_VARS = $_GET;
    $HTTP_SERVER_VARS = $_SERVER;
    $HTTP_ENV_VARS = $_ENV;
    $HTTP_POST_FILES = $_FILES;
    // Seems like PHP 4.1.0 didn't implement the $_SESSION auto-global ...
    if (isset($_SESSION)) {
        $HTTP_SESSION_VARS = $_SESSION;
    }
    //$HTTP_SESSION_VARS = $_SESSION;
    $HTTP_COOKIE_VARS = $_COOKIE;
}

And below that change:

// Fix magic_quote_gpc'ed values
$HTTP_GET_VARS =& Misc::dispelMagicQuotes($HTTP_GET_VARS);
$HTTP_POST_VARS =& Misc::dispelMagicQuotes($HTTP_POST_VARS);

To:

// Fix magic_quote_gpc'ed values
$_GET =& Misc::dispelMagicQuotes($_GET);
$_POST =& Misc::dispelMagicQuotes($_POST);

Apologies for not notifying you earlier (I think this was in a commit
message).

Cheers
Christiaan

On 29/1/08 7:31 AM, "Lynette Rayle" <el...@cs...> wrote:

> Rev 1253
> 
> To reproduce:
> - Edit any schema
> - You don't have to make any changes... just hit Save
> - Edit any displays associated with the schema, and you get a bunch of errors
> in the left column that should display the tree view of the schema
> - Edit the schema again and you see all " in the Edit XSD Source field
> replaced with \"
> - Save it again and you get \" replaced with \\\".
> 
> I was able to fix it by creating a file and changing \" back to just ".  Then
> I uploaded the file through Edit Schema's Reupload XSD Source File.  You
> don't want to copy and paste it into the Edit XSD Source field, or the
> problem continues.
> 
> Lynette
> 
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Fez-users mailing list
> Fez...@li...
> https://lists.sourceforge.net/lists/listinfo/fez-users

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Christiaan Kortekaas
Senior Library Open Sorcerer
Library Technology Service
The University of Queensland, Australia QLD 4072
Telephone : (+61) (7) 3346 4337
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~