Renegade — Thu, 16 Nov 2006 19:28:34 +0000

I had a similar situation some years ago, found a script on php.net and modified it. Try the following script and see if it helps:

<?php
$global_vars_array = array(\"_GET\", \"_POST\");
foreach($global_vars_array as $global_var)
  {
    $keys = array_keys($$global_var);
    foreach($keys as $key)
      {
        $$key = trim(${$global_var}[$key]);
      }
  }
?>

Edit, btw, you'll need to add that into every .php page which uses the global variables.

pr0gr4mm3r — Thu, 16 Nov 2006 16:07:04 +0000

Thanks so much for that info. I looked up Joomla's documentation, and sure enough, it's there. I've tried forcing register_globals with .htaccess file with no luck. I think I will just have to modify OSC with the emulation. IMHO, it was not smart of the OSC team to require register globals because of it's lack of security. Plus, I heard that it won't be an option in php 6.

Thanks again!

Greg K — Thu, 16 Nov 2006 15:35:16 +0000

I think it was in the joomla documentationt hat I saw something about how they have something to emulate Registered Globals for backwards compatability as they recommend that you have PHP's register_globals shut off.

My server has them turned on my default, and per Joomla's documentation to turn them off for my site I entered the following lines into the .htaccess file for where I have joomla installed. (Only the first one is for register globals)

[="Courier New"]php_flag register_globals off
php_flag magic_quotes_gpc on[/]

So maybe you can turn them on the same way, but for security, maybe want to look into emulation instead.

-Greg

PS. Ok, this has me wondering how they do the emulation, so I searched, and it looks like it is the registerGlobals function in the globals.php file that handles this if you turn the emulation on. May want to check into how they do it and see if you can figure a workaround.