register globals mod

[vshaykev]

any particular reason why register globals mod was not installed? I've installed it in my package, and seems to be working fine from where I stand. Am I missing something?

Also, as for new mods suggestion I would suggest "Vendor auto e-mail" mod. I could think how ppl would be using it very happily.

best regards to everybody...

[jpf]

If you can please post your changes here (ZIP file of changed files).

Have not looked at that package.

[vshaykev]

plain oscmax v2.0 RC1 installation 2 mods applied

http://www.oscommerce.com/community/contributions,2097/
http://www.oscommerce.com/community/contributions,2196/

I've created a zip file of changes..but how can I attach it to my post?

thanks.

[michael_s]

Click the 'Add an Attachment' button on the reply page...

[vshaykev]

I don't have this option. Could it be my permissions as new user?

but anyway, I've uploaded it temporary onto my server:
[link] removed. The patch is attached in follow up post.

thanks a lot Michael.

[michael_s]

I am attaching the package to this post.

[Thang422]

I am attaching the package to this post.

What is the gobal path do ?

[jpf]

"Register Globals" is a PHP setting that with OSC MS2 and version like MAX needs to be turned ON - where the new version of PHP are now defaulted to OFF and some hosting company are now giving flack about turning it ON - as there is a REMOTE chance there can ge a security problem - mostly due to very poor programing. OSC and MAX do not have this problem.

This PATCH allow your store to work if Register Globals is OFF and only on OFF.

To allow it to work for OFF or ON needs a total rewrite of MAX and MOST of the MODS/CONTRIBUTIONS (MS3 - when done/released - will be like this however there are few contributions that are done for this yet...)

[kannary]

Hey mod:

I was checking out OSCMAX as oppose to using OSC m2. I have lots of experience with OSC and I went through the whole REGISTER GLOBALS OFF/ON ordeal last year. I used a PATCHED version of OSC that was fixed for register gobals, then had to hack my way through installing a bunch of contributions that were NOT compatible with Register Globals = OFF, even with the patch. Eventually I ended up with hard-to-install OSC version that is fully compatible with Register Globals = off + about 7 contributions I added. The problem this copy I made has is that it was so heavely modified. the install process is an absolute pain in behind.

Now I am getting to make a new shop, I thought of looking into using osc-max instead this time around, however, I had assumed that the whole Register Globals issue would have been covered by now. By your response I see...no quite. So I am asking for your advice with these questions:

A) In OSC MAX 2.0....Does this Register Globals patch only covers the DEFAULT installation?..Or will most contributions have to be repatched individually? This questions applies to both the contributions that come default in OSC MAX and the ones I install on my own.

B) Knowing what you know about this?..Would you think it would be better if I stick with the OSC version I built already or would OSC MAX be easier to modified for REGISTER GLOBALS = OFF?

Anyway, I know is a bit of an open ended question, but just wondering.

Thanks

[tafkap]

i just got a quick question.....

is this mod suitable for oscmax2 rc2???

i am pretty new to all this and need to have register_globals off but dont want to mess up my working installation of oscmax2 rc2

thanks in advance for any help or reply to my question....


btw oscmax is really great, big thanks to all who make it possible......