280 replies to this topic

[CMOTD]

daydream, on Apr 13 2007, 04:24 PM, said:

...I think the problem is with the register globals mod intermingling with the product attributes mod but I'm not sure.

If that's what you think the problem is then I suggest you install the register globals contribution last and use the step-by-step instructions (rather than the pre-patched files) for the files that have already been modified by your other contributions.

Rich.

[CoolnQuiet]

Hi, I have installed the Register_Globals fix v1.5 and the following bug fixes.

Within the instructions it clearly states that the store will not work with register_globals on after installing the contribution.

However just to test I have tried my store with register_globals on & off and it works in both states.

In my php.ini I had register+globals = off and my store seems to work fine.
so I tried register_globals = 1 and my store also seems to work fine

Has anyone else with this contrib and fixes installed tried their store with register_globals on and if so did it still work.

I'm only asking to double check I have done everything right.

Thanks

[usetheforce]

I am an OS Commerce newbie and have tried to install it today but came across the issue of being unable to install due to the register globals issue. I found this contrib- (Register Globals v1.5 (w/ bugfix 2) - Patch Files Only) uploaded the latest files to m server- overiding the old ones and for some reason I cannot get beyond the first navigation of installation. If I click continue it just navigates back to the same page:

http://www.mindseyemidlands.co.uk/oscommer...all/install.php

[CMOTD]

CoolnQuiet, on Apr 26 2007, 11:51 AM, said:

...Within the instructions it clearly states that the store will not work with register_globals on after installing the contribution....

No, you've probably not done anything wrong.

I put this comment in the contribution's instructions because at the time I made the contribution, I wasn't convinced that the session handling would still work if you had RG enabled at the same time as having the patch installed.

I'm still not sure, and haven't looked at it further to convince myself one way or the other. But to be on the safe side, I would not run with this patch installed with RG enabled; if you do, you might mess up the session handling. There's no point in doing this anyway (as I am sure you are already aware).

Rich.

[CoolnQuiet]

CMOTD, on May 1 2007, 02:32 PM, said:

No, you've probably not done anything wrong.

I put this comment in the contribution's instructions because at the time I made the contribution, I wasn't convinced that the session handling would still work if you had RG enabled at the same time as having the patch installed.

I'm still not sure, and haven't looked at it further to convince myself one way or the other. But to be on the safe side, I would not run with this patch installed with RG enabled; if you do, you might mess up the session handling. There's no point in doing this anyway (as I am sure you are already aware).

Rich.

Thanks for the reply rich, I am still developing & testing my store so I am going to leave the patch installed and rg left off. If I come across anything during my testing I will let you know but so no probs. Is there anything I can look for specifically like problems during checkout etc as I am going to test my store to death before I unleash it on the net.

Regards
John

[Nhoj]

Im having the same problem as 'usetheforce', I cant get past the first stage of installation. I need this fix to run on my hosts servers.

Please help !!!!!!

[Nhoj]

Im having the same problem as 'usetheforce', I cant get past the first stage of installation. I need this fix to run on my hosts servers.

Please help !!!!!!

[enigma1]

Nhoj, on May 2 2007, 11:37 PM, said:

Im having the same problem as 'usetheforce', I cant get past the first stage of installation. I need this fix to run on my hosts servers.

Please help !!!!!!

Use the manual installation. FTP the osc files, import the database with phpmyadmin and change the configure.php files to reflect your server settings.

[coelroy]

Hi there

I have a clean shop. My server host have Globals ON and will not de-activate it since it runs on all accounts on their Unix servers. Where does this leave me? Does this mean I can't have this patch installed and is their a way to work around this?

Your input will be greatly appreciated.

[enigma1]

coelroy, on May 5 2007, 04:50 AM, said:

Hi there

I have a clean shop. My server host have Globals ON and will not de-activate it since it runs on all accounts on their Unix servers. Where does this leave me? Does this mean I can't have this patch installed and is their a way to work around this?

Your input will be greatly appreciated.

see if you can override it for your domain using the htaccess

php_value register_globals 0

[coelroy]

enigma1, on May 5 2007, 05:56 PM, said:

see if you can override it for your domain using the htaccess

php_value register_globals 0

Hi

I finally came right.

This is what I did (bearing in mind I'm still a newbie)

I downloaded a php.ini template from: http://cvs.php.net/viewvc.cgi/php4.fubar/php.ini-recommended

All the options are listed there. (you can choose what you want)

I then proceeded to upload this php.ini file to my www directory.

I then try to access my site which gave the following message:

"Server Requirement Error: register_globals is disabled in your PHP configuration. This can be enabled in your php.ini configuration file or in the .htaccess file in your catalog directory"

This is what I wanted.

This means I now can install the Register_Globals patch, meaning I can set it to OFF after applying the patch.

[tneves]

Hi everyone,
This is a great contrib. Special thanks to Richard Bentley (CMOTD) for this one. I don't understand why register_globals doesn't seem to be an important topic for OSC community in general ?!?
Well, I just wanted to ask for advise: should I replace $HTTP_*_VARS with $_* (GET, POST, etc...) in ALL of my catalog files? Would that harm my code in anyway?
It's a simple question but I haven't come up with a clear information anywhere. I have register globals contrib running ok, on a server with PHP4.4.6 and rg deactivated.

Thanks!

[CMOTD]

tneves, on May 8 2007, 08:58 AM, said:

...should I replace $HTTP_*_VARS with $_* (GET, POST, etc...) in ALL of my catalog files? Would that harm my code in anyway?

Why would you want to do this? $_* is the preferred way of referencing the global arrays but there's nothing actually wrong with with using the (old) $HTTP_* syntax.

I could be wrong, but I think $HTTP_* will be deprecated and eventually removed from PHP, but if you don't have a problem then I would leave it alone; there is no advantage in changing it and the scope for messing something up is quite high.

[silviav]

The patch doesn't work for me.
I still have the message: FATAL ERROR: register_globals is disabled in php.ini, please enable it!
I have uploaded too a php.ini in my www directory with register globals on, and modified my htaccess with register globals 0
please help me !!
thanks

[CMOTD]

silviav, on May 17 2007, 05:59 AM, said:

The patch doesn't work for me.
I still have the message: FATAL ERROR: register_globals is disabled in php.ini, please enable it!
I have uploaded too a php.ini in my www directory with register globals on, and modified my htaccess with register globals 0
please help me !!
thanks

At the risk of sounding flippant, if the RG patch doesn't work, it is probably because you've not installed it correctly. The patch DOES work - honest! Did you read ALL the installation instructions? Despite the notice at the top of the instructions saying "READ ALL OF THIS...", it is AMAZING how many people don't bother and then come unstuck and wonder why.

Also, register globals has NOTHING to do with the Apache web server or any .htaccess files that you may have. Register Globals is a PHP issue; Apache knows nothing about such things. So, take out any ref. to register globals from the .htaccess file. Oh, hang on - this is not true! You probably CAN set the PHP RG setting from with an apache config block :-)

I have never used this idea of sticking a php.ini file in the www directory. It sounds very strange to me, but I have heard it before so I can only assume it works (or not, as the case may be!).

Rich.

Edited by CMOTD, 18 May 2007, 11:55.

[no9to5guy]

Does anybody know what files exactly to download?
The one from TIM se, is full pages, I can't use those as my pages are to modified, the one form Jasek is only a .htaccess and in the one from c4great, I get no files.
Thanks

[no9to5guy]

Never mind the above post, I found them.
Thanks for this contribution, it saved my shop.

[husmen73]

Hi!

I'm researching register globals since about 2 days (my english isnt good, I hope you understand me)

I did try all ways for it. But I still take

Server Requirement Error: register_globals is disabled in your PHP configuration. This can be enabled in your php.ini configuration file or in the .htaccess file in your catalog directory.

In my .htaccess file is

<IfModule mod_php4.c>
  php_value session.use_trans_sid 0
  php_value register_globals 1
  php_value register_globals on
php_flag register_globals on
php_flag register_globals 1
</IfModule>
<IfModule sapi_apache2.c>
php_value register_globals on
php_value register_globals 1
php_flag register_globals on
php_flag register_globals 1
</IfModule>
<IfModule mod_setenvif.c>
  <IfDefine SSL>
    SetEnvIf User-Agent ".*MSIE.*" \
             nokeepalive ssl-unclean-shutdown \
             downgrade-1.0 force-response-1.0
  </IfDefine>
</IfModule>
<IfModule mod_php5.c>
  php_value session.use_trans_sid 0
  php_value register_globals 1
  php_value register_globals on
php_flag register_globals on
php_flag register_globals 1
</IfModule>

I'm useing PHP 5 and Windows Server 2003 Enterprise. In my server, php asp sql and mysql can works same time. In php.ini, Register Globals is off. So I changed .htaccess, but Oscommerce didn't work on my server. (Not local)


Thanks.

[Woolvey]

Are any of you that have applied the Register Globals mod using either the US PayPal WPP or Google Checkout mods successfully?

My tests show that neither of these mods work with Register Globals disabled and I would prefer not to try to untangle variable usage in these mods if someone else can tell me what changes I should make.

This topic is raised a couple of times earlier in this thread but the only stated conclusion seems to be to enable globals again.

Any help or advice would be much appreciated!!

[abubobbob]

Out of interested how much of and why is it, a security risk is it to have register_globals turned on???