register_globals on?

Are you responsible for making OCS work -- installing, upgrading, migrating or troubleshooting? Do you think you've found a bug? Post in this forum.

Moderators: jmacgreg, michael, John

Forum rules
The Public Knowledge Project Support Forum is moving to

This forum will be maintained permanently as an archived historical resource, but all new questions should be added to the new forum. Questions will no longer be monitored on this old forum after March 30, 2015.
Posts: 3
Joined: Tue Jan 17, 2006 6:28 pm

register_globals on?

Postby szazs89 » Fri Feb 16, 2007 5:27 am

On the download page it can be read that register_globals should be on.

Do I really need to set this on?! This option can be the source of security vulnerability (in case of half-baked codes) and if it possible I would avoid using this "feature".

Posts: 10015
Joined: Wed Aug 10, 2005 12:56 pm

Postby asmecher » Fri Feb 16, 2007 10:09 am

Hi szazs89,

The register_globals feature is currently required for OCS 1.x only; the 2.x versions of the suite do not use it. We'll be releasing OCS 2.0 soon and it won't require register_globals either.

In the meantime, OCS 1.x should be secure from global variable attacks.

Alec Smecher
Public Knowledge Project Team
Don't miss the First International PKP Scholarly Publishing Conference
July 11 - 13, 2007, Vancouver, BC, Canada

Return to “OCS Technical Support”

Who is online

Users browsing this forum: No registered users and 2 guests