PHP 4.3.1 Security Fix and RC1 of 6.5

Posted: Wed Feb 19, 2003 4:14 pm

I Recently did the PHP Upgrade from 4.3.0 to 4.3.1 and Also went to RC1 of 6.5

Now when I try to access my site I get the following

Site address is http://63.64.157.157

Notice: Undefined variable: HTTP_USER_AGENT in E:\inetpub\wwwroot\mainfile.php on line 16

Notice: import_request_variables() [function.import-request-variables]: No prefix specified - possible security hazard in E:\inetpub\wwwroot\mainfile.php on line 37

Notice: Undefined variable: forum_admin in E:\inetpub\wwwroot\mainfile.php on line 61

Notice: Use of undefined constant inside_mod - assumed 'inside_mod' in E:\inetpub\wwwroot\mainfile.php on line 64

Notice: Undefined variable: inside_mod in E:\inetpub\wwwroot\db\db.php on line 44

Notice: Use of undefined constant sitename - assumed 'sitename' in E:\inetpub\wwwroot\mainfile.php on line 80

Notice: Use of undefined constant nukeurl - assumed 'nukeurl' in E:\inetpub\wwwroot\mainfile.php on line 81

Etc.

Any Help would be appreciated.

http://63.64.157.157/analyze.php

Nuke Cops Founder Joined: Nov 14, 2002 Posts: 5939

Nothing major was done to PHP 4.3.1 other than fixing the security hole. Check the php.ini settings in the announcement forum's thread.

Joined: Jan 31, 2004 Posts: -88

please read the welcome thread in the future.

The fix is simple:

go into php.ini and change hte line:

Code:

error_reporting = E_ALL & E_NOTICE

to

Code:

;error_reporting = E_ALL & E_NOTICE

and

Code:

;error_reporting = E_ALL & ~E_NOTICE

to

Code:

error_reporting = E_ALL & ~E_NOTICE

or if those lines aren't there:
change

Code:

error_reporting = E_ALL

to

Code:

error_reporting = E_ALL & ~E_NOTICE

ArtificialINtel

Posted: Wed Feb 19, 2003 4:39 pm

DOH.. Sorry Guys. My Bad. Everything was working fine till I upgraded PHP. Did not figured it would touch the ini file. Sorry.

/e Looks Stupid now. Smile