From: <jfi...@us...> - 2002-12-29 10:58:12
|
Update of /cvsroot/mantisbt/mantisbt/doc In directory sc8-pr-cvs1:/tmp/cvs-serv31336/doc Modified Files: ChangeLog TROUBLESHOOTING configuration.html Log Message: officially remove Mantis' reliance on register_globals Index: ChangeLog =================================================================== RCS file: /cvsroot/mantisbt/mantisbt/doc/ChangeLog,v retrieving revision 1.300 retrieving revision 1.301 diff -u -d -r1.300 -r1.301 --- ChangeLog 29 Dec 2002 10:30:48 -0000 1.300 +++ ChangeLog 29 Dec 2002 10:58:09 -0000 1.301 @@ -135,6 +135,7 @@ * New config option (store_reminders): controls whether to store sent reminders as a bugnote * New config option (bug_reminder_threshold): the access level required to send reminders * New config option (reminder_recipents_monitor_bug): To automatically add recipients of bug reminders to the monitor list of the defect. This is done if the access level is greater than or equal to monitor threshold and the recipient is not the handler or the reporter. + * Security fix: Mantis no longer relies on register_globals being turned on 2002.08.23 - 0.17.5 * Corrected bug_delete.php and bug_delete_page.php, which ignored the $g_allow_bug_delete_access_level setting. Index: TROUBLESHOOTING =================================================================== RCS file: /cvsroot/mantisbt/mantisbt/doc/TROUBLESHOOTING,v retrieving revision 1.3 retrieving revision 1.4 diff -u -d -r1.3 -r1.4 --- TROUBLESHOOTING 23 Jan 2002 08:27:05 -0000 1.3 +++ TROUBLESHOOTING 29 Dec 2002 10:58:09 -0000 1.4 @@ -23,11 +23,6 @@ either reinstall or manually convert passwords over to another supported encryption system. - SOLUTION 3: You do not have register_globals enabled. Set this to On in - your php.ini file. - - http://www.php.net/manual/en/configuration.php#ini.register-globals - SOLUTION 4: You do not have cookies enablewd in your browser. You must have cookies enabled. Sometimes, especially after an upgrade, you may have to delete your previous cookies. Index: configuration.html =================================================================== RCS file: /cvsroot/mantisbt/mantisbt/doc/configuration.html,v retrieving revision 1.26 retrieving revision 1.27 diff -u -d -r1.26 -r1.27 --- configuration.html 4 Dec 2002 10:30:33 -0000 1.26 +++ configuration.html 29 Dec 2002 10:58:09 -0000 1.27 @@ -1272,14 +1272,6 @@ </td> </tr> <tr> - <td width="20%" bgcolor="#ddddff"> - $g_register_globals - </td> - <td width="80%" bgcolor="#ffffff"> - Experimental. If your register_globals is Off then set this to OFF. Check your register_globals setting in php.ini or phpinfo(). - </td> -</tr> -<tr> <td colspan="2" bgcolor="#eeeeee"> </td> |