#7 FIX for PHP 4.2.2 onwards

[andy harris]

a2z will not work on PHP versions 4.2.2 and above since
you can no longer pass variables in the URL.

This is a security issue with PHP that has been fixed and
as a result, a2z will only list contact names but never
show any details.

For a very quick, but relatively unsecure fix (well you'll
be no worse off!) add the following line to
master.functions.inc

import_request_variables("gp", "") ;

Please ensure that this is the first line of code.

The reason for the fix in PHP was that arbitary variables
could be modified by a URL request. Adding this line
means that just the variables in a2z could be modified,
but since its not a secured application it shouldn't
matter.

You can add security with a .htaccess file

Regards

Andy

[Nobody/Anonymous]

Logged In: NO

I tracked it down to that URL but didn't know it had changed in PHP...I knew something had gone wrong since it used to work! Thanks for this.