You are viewing the PKP Support Forum | PKP Home Wiki

register_globals on?

Are you responsible for making OCS work -- installing, upgrading, migrating or troubleshooting? Do you think you've found a bug? Post in this forum.

Moderators: jmacgreg, michael, John

Forum rules
What to do if you have a technical problem with OCS:

1. Search the forum. You can do this from the Advanced Search Page or from our Google Custom Search, which will search the entire PKP site. If you are encountering an error, we especially recommend searching the forum for said error.

2. Check the FAQ to see if your question or error has already been resolved. Please note that this FAQ is OJS-centric, but most issues are applicable to both platforms.

3. Post a question, but please, only after trying the above two solutions. If it's a workflow or usability question you should probably post to the OCS Conference Support and Discussion subforum; if you have a development question, try the OCS Development subforum.

register_globals on?

Postby szazs89 » Fri Feb 16, 2007 5:27 am

On the download page it can be read that register_globals should be on.

Do I really need to set this on?! This option can be the source of security vulnerability (in case of half-baked codes) and if it possible I would avoid using this "feature".
Posts: 3
Joined: Tue Jan 17, 2006 6:28 pm

Postby asmecher » Fri Feb 16, 2007 10:09 am

Hi szazs89,

The register_globals feature is currently required for OCS 1.x only; the 2.x versions of the suite do not use it. We'll be releasing OCS 2.0 soon and it won't require register_globals either.

In the meantime, OCS 1.x should be secure from global variable attacks.

Alec Smecher
Public Knowledge Project Team
Don't miss the First International PKP Scholarly Publishing Conference
July 11 - 13, 2007, Vancouver, BC, Canada
Posts: 10015
Joined: Wed Aug 10, 2005 12:56 pm

Return to OCS Technical Support

Who is online

Users browsing this forum: Bing [Bot] and 2 guests