[libvirt] [PATCH] Re: Minor php errors in the libvirt search script?

Justin Clift jclift at redhat.com
Mon Jan 10 12:46:58 UTC 2011


On 10/01/2011, at 5:41 PM, Daniel Veillard wrote:
> [  Cc'ing back the list ]
> On Sun, Jan 09, 2011 at 03:11:29AM +1100, Justin Clift wrote:
>> Hi Daniel,
>> 
>> Noticing these php warning's showing up in the apache libvirt.org error log:
>> 
>>  [Sat Jan 08 17:09:24 2011] [error] [client 64.217.19.104] PHP Notice:  Undefined variable: HTTP_GET_VARS in /data/www/libvirt.org/search.php on line 21, referer: http://libvirt.org/formatdomain.html
>>  [Sat Jan 08 17:09:24 2011] [error] [client 64.217.19.104] PHP Notice:  Undefined variable: HTTP_GET_VARS in /data/www/libvirt.org/search.php on line 22, referer: http://libvirt.org/formatdomain.html
>>  [Sat Jan 08 17:09:24 2011] [error] [client 64.217.19.104] PHP Notice:  Undefined variable: PHP_SELF in /data/www/libvirt.org/search.php on line 37, referer: http://libvirt.org/formatdomain.html
>> 
>> Any idea if they're something we need to care about?
> 
>  Yup, the search php was designed in php4 time frame and those global
> variables are not turned off by default for security reasons
>  http://fr.php.net/manual/en/security.registerglobals.php
> 
> The following patch should fix those,

Looks pretty simple, but not sure how to test it without having putting it on a PHP server with the right bits.

Guess we ACK it, and see if it works?




More information about the libvir-list mailing list