From: j b <bel...@gm...> - 2006-02-23 18:47:43
|
Hi All, This message came through in December and wasn't discussed. I'm having the same problems, essentially I can't edit designer accounts, even from the root user. Thanks, Jon Specs PHP HP Information Version: 4.4.1 OS: SunOS SAPI: apache register_globals: Yes magic_quotes_gpc: Yes magic_quotes_runtime: No safe_mode: Yes open_basedir: PHP Extensions dBase: Yes GD: Yes -- bundled (2.0.28 compatible) GNU Gettext: No LDAP: Yes MySQL: Yes PHP Extension Dir (compiled): /usr/local/lib/php/extensions/no-debug-non-zts-20020429 PHP Extension Dir (run time): ./ phpESP Settings MYSQL: 4.1.15 APACHE: Apache/1.3.34 (Unix) DAV/1.0.3 PHP/4.4.1 |
From: Matthew G. <mat...@gm...> - 2006-02-23 20:55:52
|
I think if you turn "register globals" off it will fix this problem. On 2/23/06, j b <bel...@gm...> wrote: > > Hi All, > > This message came through in December and wasn't discussed. I'm having > the same problems, essentially I can't edit designer accounts, even > from the root user. > > Thanks, > > Jon > > Specs > > > PHP > > HP Information > Version: 4.4.1 > OS: SunOS > SAPI: apache > register_globals: Yes > magic_quotes_gpc: Yes > magic_quotes_runtime: No > safe_mode: Yes > open_basedir: > PHP Extensions > dBase: Yes > GD: Yes -- bundled (2.0.28 compatible) > GNU Gettext: No > LDAP: Yes > MySQL: Yes > PHP Extension Dir (compiled): > /usr/local/lib/php/extensions/no-debug-non-zts-20020429 > PHP Extension Dir (run time): ./ > phpESP Settings > > MYSQL: 4.1.15 > > APACHE: Apache/1.3.34 (Unix) DAV/1.0.3 PHP/4.4.1 > > > ------------------------------------------------------- > This SF.Net email is sponsored by xPML, a groundbreaking scripting > language > that extends applications into web and mobile media. Attend the live > webcast > and join the prime developer group breaking into this new coding > territory! > http://sel.as-us.falkag.net/sel?cmdlnk&kid=110944&bid$1720&dat=121642 > _______________________________________________ > phpESP-general mailing list > php...@li... > https://lists.sourceforge.net/lists/listinfo/phpesp-general > -- D'oh! |
From: j b <bel...@gm...> - 2006-02-24 14:12:38
|
Is there an option other than turning off register globals? We're running o= n a large university system and don't have the option to modify the configuration of php. Jon On 2/23/06, Matthew Gregg <mat...@gm...> wrote: > > I think if you turn "register globals" off it will fix this problem. > > On 2/23/06, j b <bel...@gm... > wrote: > > > Hi All, > > > > This message came through in December and wasn't discussed. I'm having > > the same problems, essentially I can't edit designer accounts, even > > from the root user. > > > > Thanks, > > > > Jon > > > > Specs > > > > > > PHP > > > > HP Information > > Version: 4.4.1 > > OS: SunOS > > SAPI: apache > > register_globals: Yes > > magic_quotes_gpc: Yes > > magic_quotes_runtime: No > > safe_mode: Yes > > open_basedir: > > PHP Extensions > > dBase: Yes > > GD: Yes -- bundled (2.0.28 compatible) > > GNU Gettext: No > > LDAP: Yes > > MySQL: Yes > > PHP Extension Dir (compiled): > > /usr/local/lib/php/extensions/no-debug-non-zts-20020429 > > PHP Extension Dir (run time): ./ > > phpESP Settings > > > > MYSQL: 4.1.15 > > > > APACHE: Apache/1.3.34 (Unix) DAV/1.0.3 PHP/4.4.1 > > > > > > ------------------------------------------------------- > > This SF.Net email is sponsored by xPML, a groundbreaking scripting > > language > > that extends applications into web and mobile media. Attend the live > > webcast > > and join the prime developer group breaking into this new coding > > territory! > > http://sel.as-us.falkag.net/sel?cmdlnk&kid=110944&bid$1720&dat=121642 > > <http://sel.as-us.falkag.net/sel?cmdlnk&kid%110944&bid$1720&dat%121642> > > _______________________________________________ > > phpESP-general mailing list > > php...@li... > > https://lists.sourceforge.net/lists/listinfo/phpesp-general > > > > > > -- > D'oh! |
From: Peter F. <pe...@si...> - 2006-02-26 17:33:48
|
j b wrote: > Is there an option other than turning off register globals? We're > running on a large university system and don't have the option to modify > the configuration of php. It should already be off if it's running on a large university system, as it's a serious security hole. Ask your maintainer (and refer him to me if necessary: I run a similar system and register_globals is banned on any server on campus). ///Peter |
From: Peter F. <pe...@si...> - 2006-02-23 21:49:01
|
j b wrote: > register_globals: Yes Just a nasty thought. Does phpESP require register_globals? I sure hope not, cos they're banned here. ///Peter |
From: Matthew G. <mat...@gm...> - 2006-02-27 16:54:10
|
Globals should be OFF. On 2/23/06, Peter Flynn <pe...@si...> wrote: > > j b wrote: > > register_globals: Yes > > Just a nasty thought. Does phpESP require register_globals? > I sure hope not, cos they're banned here. > > ///Peter > > > ------------------------------------------------------- > This SF.Net email is sponsored by xPML, a groundbreaking scripting > language > that extends applications into web and mobile media. Attend the live > webcast > and join the prime developer group breaking into this new coding > territory! > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D110944&bid=3D241720&dat= =3D121642 > _______________________________________________ > phpESP-general mailing list > php...@li... > https://lists.sourceforge.net/lists/listinfo/phpesp-general > -- D'oh! |
From: j b <bel...@gm...> - 2006-02-27 19:20:55
|
Okay, For clarification: 1) the reason I get kicked off the admin page when trying to modify designers is that register_globals is ON 2) For security reasons register_globals should be OFF Thank you, I'll talk with the powers that be to see if we can change things= . Thanks, Jon On 2/27/06, Matthew Gregg <mat...@gm...> wrote: > > Globals should be OFF. > > On 2/23/06, Peter Flynn <pe...@si...> wrote: > > > > j b wrote: > > > register_globals: Yes > > > > Just a nasty thought. Does phpESP require register_globals? > > I sure hope not, cos they're banned here. > > > > ///Peter > > > > > > ------------------------------------------------------- > > This SF.Net email is sponsored by xPML, a groundbreaking scripting > > language > > that extends applications into web and mobile media. Attend the live > > webcast > > and join the prime developer group breaking into this new coding > > territory! > > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D110944&bid=3D241720&dat= =3D121642 > > _______________________________________________ > > phpESP-general mailing list > > php...@li... > > https://lists.sourceforge.net/lists/listinfo/phpesp-general > > > > > > -- > D'oh! |
From: Peter F. <pe...@si...> - 2006-02-27 21:18:38
|
Matthew Gregg wrote: > Globals should be OFF. Thanks :-) Still haven't found the reason for the non-export of data though. As a non-PHP person, what's the best way for me to trace what the export routine is doing? In admin/include/function I can edit survey_export_csv.inc -- what command can I reasonably insert between lines simply to log to a disk file that the program has gotten that far? eg write(somefile,$numcols) or whatever the syntax is. Surely someone has found and fixed this before now? ///Peter |