[phpesp-dev] [ phpesp-Bugs-1569152 ] FATAL CODE ERROR in "admdesigner.inc"

[SourceForge.net <no...@so...>]

Bugs item #1569152, was opened at 2006-10-02 04:39
Message generated for change (Comment added) made by greggmc
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=1569152&group_id=8956

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Admin
Group: None
>Status: Closed
>Resolution: Duplicate
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: FATAL CODE ERROR in "admdesigner.inc"

Initial Comment:
In this file there is a big problem.

at line 190 and 191 there is this :

$u =& $username;
$r =& $realm;

and after at line 213 => 220

<?php
	echo("<th class=\"right\">". _('Username') ."</th>\n");
	if(empty($u))
		$u = mktext('u', 16, 16, $GLOBALS);
	else
		$u = mkhidden('u', $GLOBALS) . "<tt>$u</tt>";
	echo("<td class=\"left\">$u</td>\n");
?>

finaly the variable 

$username = "<input type="hid... 

and when we check auth in manage.inc the username is
substitue with "<input type="hid...

We are disconnecting and all change or other are lost.


TOTOleHero
Thomas Lecarpentier

----------------------------------------------------------------------

>Comment By: Matthew Gregg (greggmc)
Date: 2006-10-02 08:26

Message:
Logged In: YES 
user_id=14116

This is related to register globals being on(unsupported
configuration by phpesp).  Please turn globals off in you
php.ini.

----------------------------------------------------------------------

Comment By: Thomas Lecarpentier (totolehero)
Date: 2006-10-02 06:45

Message:
Logged In: YES 
user_id=353593

there are another bug in this page 

this block:

foreach(array(
				'username', 'realm', 'fname', 'lname', 'email',
				'pdesign', 'pstatus', 'pdata', 'pall', 'pgroup', 'puser',
				'disabled', 'expiration') as $col)
{ $$col = $arr[$col]; }

is catastrophique :(

beacause $username is override

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=1569152&group_id=8956