New Santy-Worm attacks *all* PHP-skripts (fwd)

[Matthew Miller]

On Sat, Dec 25, 2004 at 10:08:00PM +0200, Pekka Savola wrote:
> I noticed this at one site.  AFAIK, turning off register_globals 
> mitigates this a bit.  Unfortunately it was on by default in the 
> earlier versions of php..
> Not sure what we should do (if anything).

It's off in the default php.ini in php-4.2.2-17.7.legacy.


-- 
Matthew Miller           mattdm at mattdm.org        <http://www.mattdm.org/>
Boston University Linux      ------>                <http://linux.bu.edu/>