Page 1 of 1

variable writing

Posted: Fri Jul 06, 2007 5:57 am
by spartan7
Hi there

I have a site I recently installed on my webserver but there is a problem with getting it to run correctly, and I see what the problem is.

Basically, he's written all the $_GET/$_POST variables as ordinary variables. So in his script, instead of writing, $_GET['var'] he'll write $var and it must have worked somehow like that on the previous server.

Is there any simple way I can get the site working without having to change every single incidence of him writing $var when it needed to be $_GET['var'] to work ?

Thanks

PS I don't have permissions to alter the php.ini or related on the server so I'll need to find another route

Posted: Fri Jul 06, 2007 6:00 am
by volka

Posted: Fri Jul 06, 2007 6:06 am
by siri.2180
try extract($_REQUEST) / extract($_GET)

Posted: Fri Jul 06, 2007 6:50 am
by onion2k
The correct answer here is: Modify the application to work without needing register_globals. Anything else and you might as well just abandon any hope of security.