Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

girolimoni

Pioneers
  • Posts

    72
  • Joined

  • Last visited

Reputation Activity

  1. Like
    girolimoni reacted to FWR Media in [contribution] Security Pro - Querystring protection against hackers.   
    Please don't post complete files .. it makes the thread impossible to read.
     
    Find ..

    // $HTTP_xxx_VARS are always set on php4 if (!is_array($HTTP_GET_VARS)) $HTTP_GET_VARS = array(); if (!is_array($HTTP_POST_VARS)) $HTTP_POST_VARS = array(); if (!is_array($HTTP_COOKIE_VARS)) $HTTP_COOKIE_VARS = array();
     
    Replace with ..
     

    if (PHP_VERSION >= 4.1) { $HTTP_GET_VARS =& $_GET; $HTTP_POST_VARS =& $_POST; $HTTP_COOKIE_VARS =& $_COOKIE; $HTTP_SESSION_VARS =& $_SESSION; $HTTP_POST_FILES =& $_FILES; $HTTP_SERVER_VARS =& $_SERVER; } else { if (!is_array($HTTP_GET_VARS)) $HTTP_GET_VARS = array(); if (!is_array($HTTP_POST_VARS)) $HTTP_POST_VARS = array(); if (!is_array($HTTP_COOKIE_VARS)) $HTTP_COOKIE_VARS = array(); }
     
    you really should update your files, you are running extremely old and insecure code.
×
×
  • Create New...