On the download page it can be read that register_globals should be on.
Do I really need to set this on?! This option can be the source of security vulnerability (in case of half-baked codes) and if it possible I would avoid using this "feature".
register_globals on?
Moderators: jmacgreg, michael, John
Forum rules
What to do if you have a technical problem with OCS:
1. Search the forum. You can do this from the Advanced Search Page or from our Google Custom Search, which will search the entire PKP site. If you are encountering an error, we especially recommend searching the forum for said error.
2. Check the FAQ to see if your question or error has already been resolved. Please note that this FAQ is OJS-centric, but most issues are applicable to both platforms.
3. Post a question, but please, only after trying the above two solutions. If it's a workflow or usability question you should probably post to the OCS Conference Support and Discussion subforum; if you have a development question, try the OCS Development subforum.
What to do if you have a technical problem with OCS:
1. Search the forum. You can do this from the Advanced Search Page or from our Google Custom Search, which will search the entire PKP site. If you are encountering an error, we especially recommend searching the forum for said error.
2. Check the FAQ to see if your question or error has already been resolved. Please note that this FAQ is OJS-centric, but most issues are applicable to both platforms.
3. Post a question, but please, only after trying the above two solutions. If it's a workflow or usability question you should probably post to the OCS Conference Support and Discussion subforum; if you have a development question, try the OCS Development subforum.
2 posts
• Page 1 of 1
register_globals on?
by szazs89 » Fri Feb 16, 2007 5:27 am
- szazs89
- Posts: 3
- Joined: Tue Jan 17, 2006 6:28 pm
by asmecher » Fri Feb 16, 2007 10:09 am
Hi szazs89,
The register_globals feature is currently required for OCS 1.x only; the 2.x versions of the suite do not use it. We'll be releasing OCS 2.0 soon and it won't require register_globals either.
In the meantime, OCS 1.x should be secure from global variable attacks.
Regards,
Alec Smecher
Public Knowledge Project Team
---
Don't miss the First International PKP Scholarly Publishing Conference
July 11 - 13, 2007, Vancouver, BC, Canada
http://ocs.sfu.ca/pkp2007/
The register_globals feature is currently required for OCS 1.x only; the 2.x versions of the suite do not use it. We'll be releasing OCS 2.0 soon and it won't require register_globals either.
In the meantime, OCS 1.x should be secure from global variable attacks.
Regards,
Alec Smecher
Public Knowledge Project Team
---
Don't miss the First International PKP Scholarly Publishing Conference
July 11 - 13, 2007, Vancouver, BC, Canada
http://ocs.sfu.ca/pkp2007/
- asmecher
- Posts: 5769
- Joined: Wed Aug 10, 2005 12:56 pm
2 posts
• Page 1 of 1
Return to OCS Technical Support
Who is online
Users browsing this forum: No registered users and 2 guests