UBB.Developers Forums Community Development Programming PHP and Server-side Scripting Sessions and Register_Globals

Hi, I'm using UBBthreads 6.4.1 and php 4.3.4. I tried using sessions instead of cookies and originally it wouldn't let me log in and this is the error message I got:

Warning: Unknown(): Your script possibly relies on a session side-effect which existed until PHP 4.2.3. Please be advised that the session extension does not consider global variables as a source of data, unless register_globals is enabled. You can disable this functionality and this warning by setting session.bug_compat_42 or session.bug_compat_warn to off, respectively. in Unknown on line 0

I went in php.ini and turned on register_globals. I read using register_globals is unsafe and would prefer not to have it on. Is there any way to have sessions work without register_globals enabled?

Any help would be much appreciated. Thanks
CoralineSage

AFAIK you don't need to have register_globals enabled with threads.
So you should be fine with turning the warnings off as statement in the waring message. To avoid these warnings, the session handling in ubb.threads needs to be updated so that $_SESSION is used instead.

Hi Astaran,

Thanks for the reply. Where can I update the session handling in ubb.threads? Is that a one file update or do you mean that I have to go through all the files that check for live sessions? I found session references on ubbt.inc.php but I'm not sure what I had to edit.

Let me know if you can help. Thank you so much for your time.

CoralineSage

You'll need to do that in several files.
ubbt.inc.php, postlist.php, domarkallread.php, showflat.php, showthreaded.php

It should if you replace the session_register calls with something like this
$_SESSION['myvariable'] = $myvalue;