Security Fix

[Anon]

PHP.net released a Security Fix on Feb 27, 2002 for PHP 3.0, PHP 4.0.6, and PHP 4.1.0/4.1.1.

My system has PHP 4.0.3pl1 running on RedHat 6.2.

Would appreciate any advise on the following:
1. Can I use the fix for PHP 4.0.6?
2. The fix seems to be a file call rfc1867.c.
How do I go about applying the fix?

Thank you very much.

[dannys]

You've got to add the fixed files to your PHP source tree and then recompile it. I'd suggest using the latest version of PHP (4.1.2) rather than patching up an old release.

[Anon]

my question concerning that is the global variable issue.

Does the new release of PHP totally eliminate the ability of registering global variables, or is it just turned off by default ?

[dannys]

it's just turned off by default in the 4.1.x releases but I'm lead to believe that the option will be removed altogether in the 4.2.x releases.