hi,
same thing to me...

update not.. blah blah ^^

.htaccess on root block all my site ( hoster = free.fr ) almost i have other htaccess file on other folder...

and

addons must have "certified" working on 1.7.1 or they works as is ?

Mikycol wrote:i cant turn off register_globals.

Any solutions??

I found a globals destroyer function in phpbb 3
I'll post the code in a following post

---

shan_aya wrote:addons must have "certified" working on 1.7.1 or they works as is ?

No, for the most part, existing addons should work ok

The certified thing is just addons that conform to a set of rules

Ok, I found a register_globals destroyer that phpBB3 uses

File upgrade.php

Before

Code: Select all

define('DIR_SEP',DIRECTORY_SEPARATOR); 

Insert

Code: Select all

// Be paranoid with passed vars
if (@ini_get('register_globals') == '1' || strtolower(@ini_get('register_globals')) == 'on')
{
    deregister_globals();
}


/*
* Remove variables created by register_globals from the global scope
* Thanks to Matt Kavanagh
*/
function deregister_globals()
{
    $not_unset = array(
        'GLOBALS' => true,
        '_GET' => true,
        '_POST' => true,
        '_COOKIE' => true,
        '_REQUEST' => true,
        '_SERVER' => true,
        '_SESSION' => true,
        '_ENV' => true,
        '_FILES' => true,
    );

    // Not only will array_merge and array_keys give a warning if
    // a parameter is not an array, array_merge will actually fail.
    // So we check if _SESSION has been initialised.
    if (!isset($_SESSION) || !is_array($_SESSION))
    {
        $_SESSION = array();
    }

    // Merge all into one extremely huge array; unset
    // this later
    $input = array_merge(
        array_keys($_GET),
        array_keys($_POST),
        array_keys($_COOKIE),
        array_keys($_SERVER),
        array_keys($_SESSION),
        array_keys($_ENV),
        array_keys($_FILES)
    );

    foreach ($input as $varname)
    {
        if (isset($not_unset[$varname]))
        {
            // Hacking attempt. No point in continuing.
            exit;
        }

        unset($GLOBALS[$varname]);
    }

    unset($input);
} 

Hey Zanix do we need to run the upgrade for 1.7 to 1.7.1? I'm getting the same error these guys are and I have registered globals turned off.

Never mind I changed the version in the database and it went.

wow,
that's works for me ^^
good job Zanix,
thx

I get this:

Code: Select all

Upgrade Roster     
   
Looks like you've loaded a new version of Roster

Your Version: 1.7.0
New Version: 1.7.1


With an Upgrade button.

I hit Upgrade, I get the select which version you're upgrading from with a dropdown box (though I'd assume it knows this already from the previous screen). I leave it on 1.7.0 and hit Upgrade (again).

Then I get:

Code: Select all

Upgrade Error
 
You have already upgraded Roster
Or you have a newer version than this upgrader

I tried the earlier fix, changing the .htaccess file regarding the register globals. When I did that, it just completely stopped working and started giving me error 500s. I went to check my error log and this is what I see:

Code: Select all

[Thu Oct 26 10:13:25 2006] [alert] /home2/public_html/.htaccess: Invalid command 'php_flag', perhaps mis-spelled or defined by a module not included in the server configuration

I'm confused

Do you have register globals on?

zanix wrote:Ok, I found a register_globals destroyer that phpBB3 uses

File upgrade.php

Before

Code: Select all

define('DIR_SEP',DIRECTORY_SEPARATOR); 

Insert

Code: Select all

// Be paranoid with passed vars
if (@ini_get('register_globals') == '1' || strtolower(@ini_get('register_globals')) == 'on')
{
    deregister_globals();
}


/*
* Remove variables created by register_globals from the global scope
* Thanks to Matt Kavanagh
*/
function deregister_globals()
{
    $not_unset = array(
        'GLOBALS' => true,
        '_GET' => true,
        '_POST' => true,
        '_COOKIE' => true,
        '_REQUEST' => true,
        '_SERVER' => true,
        '_SESSION' => true,
        '_ENV' => true,
        '_FILES' => true,
    );

    // Not only will array_merge and array_keys give a warning if
    // a parameter is not an array, array_merge will actually fail.
    // So we check if _SESSION has been initialised.
    if (!isset($_SESSION) || !is_array($_SESSION))
    {
        $_SESSION = array();
    }

    // Merge all into one extremely huge array; unset
    // this later
    $input = array_merge(
        array_keys($_GET),
        array_keys($_POST),
        array_keys($_COOKIE),
        array_keys($_SERVER),
        array_keys($_SESSION),
        array_keys($_ENV),
        array_keys($_FILES)
    );

    foreach ($input as $varname)
    {
        if (isset($not_unset[$varname]))
        {
            // Hacking attempt. No point in continuing.
            exit;
        }

        unset($GLOBALS[$varname]);
    }

    unset($input);
} 

Worked for me. Thanks!

PleegWat wrote:Do you have register globals on?

I don't know?
I assumed since it wasn't working as stated above and having the same problem that they were.

Bajah -
Did you try my fix?

zanix wrote:Bajah -
Did you try my fix?

Yessir!

Hi Bajah,

I had the same problem than you and found the solution.

When i saw zanix fix i quickly copy/paste the code using notepad.

But when pasting, notepad does not format your code as it is formatted in html, so there are no breaking row.

So my code was on one line, and the first line is a comment so the register variables were not deregister.

Simply reformat your code in upgrade.php and it will work.

Thx Zanix

Remind wrote:Hi Bajah,

I had the same problem than you and found the solution.

When i saw zanix fix i quickly copy/paste the code using notepad.

But when pasting, notepad does not format your code as it is formatted in html, so there are no breaking row.

So my code was on one line, and the first line is a comment so the register variables were not deregister.

Simply reformat your code in upgrade.php and it will work.

Thx Zanix

Thanks for that explanation I've just spent the last hour tearing my hair out