From owner-freebsd-ports  Thu Jul 25  6:10:13 2002
Delivered-To: freebsd-ports@hub.freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 21ADC37B405
	for <freebsd-ports@hub.freebsd.org>; Thu, 25 Jul 2002 06:10:09 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C0B1D43E6E
	for <freebsd-ports@hub.freebsd.org>; Thu, 25 Jul 2002 06:10:08 -0700 (PDT)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g6PDA8JU058366
	for <freebsd-ports@freefall.freebsd.org>; Thu, 25 Jul 2002 06:10:08 -0700 (PDT)
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g6PDA8EO058362;
	Thu, 25 Jul 2002 06:10:08 -0700 (PDT)
Date: Thu, 25 Jul 2002 06:10:08 -0700 (PDT)
Message-Id: <200207251310.g6PDA8EO058362@freefall.freebsd.org>
To: freebsd-ports@FreeBSD.org
Cc: 
From: Chris Shenton <chris@shenton.org>
Subject: Re: ports/40979: mod_php security fix breaks PHP 4.2.2: variables not passed
Reply-To: Chris Shenton <chris@shenton.org>
Sender: owner-freebsd-ports@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-ports.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-ports>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-ports>
X-Loop: FreeBSD.org

The following reply was made to PR ports/40979; it has been noted by GNATS.

From: Chris Shenton <chris@shenton.org>
To: Alexandr Kovalenko <never@nevermind.kiev.ua>
Cc: FreeBSD-gnats-submit@FreeBSD.ORG
Subject: Re: ports/40979: mod_php security fix breaks PHP 4.2.2: variables not passed
Date: 25 Jul 2002 09:07:00 -0400

 Alexandr Kovalenko <never@nevermind.kiev.ua> writes:
 
 > Pilot error! (c)
 > 
 > Check your /usr/local/etc/php.ini file. 
 > There should be at least:
 > register_globals = On
 > register_argc_argv = On
 
 Doh! Yes, changing register_globals from default Off to On fixed this.
 
 I had a php.ini-dist and no php.ini, so it sounds like the defaults
 have changed between php versions.
 
 Does enabling this put me at risk from the recent security hole? 
 
 Thanks for the fast response!

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message