HTTPAuth Requires "register_globals" to be ON

Posted: Mon Mar 07, 2005 6:52 pm

what does it mean?, with the old version CGIAuth works correctly, but now in the version NukeSentinel™ 2.2.0, it says to me this: HTTPAuth Requires "register_globals" to be ON. Smack

registered · Posted: Tue Mar 08, 2005 11:08 am

Try this, find (at the end of includes/nukesentinel.php):

Code:

if(ini_get("register_globals")) {


  $sapi_name = strtolower(php_sapi_name());


  $apass = $db->sql_numrows($db->sql_query("SELECT * FROM ".$prefix."_nsnst_admins WHERE password_md5=''"));


  if($apass > 0 AND $ab_config['http_auth'] == 1) {


    @require_once("admin/modules/nukesentinel/functions.php");


    absave_config("http_auth",'0');


  }


  if($ab_config['http_auth'] == 1 AND strpos($sapi_name,"cgi")===FALSE) {


    if (basename($_SERVER['PHP_SELF'], '.php')==$admin_file) {


      $allowPassageToAdmin = FALSE;


      $authresult = $db->sql_query("SELECT login, password_md5 FROM ".$prefix."_nsnst_admins");


      while ($getauth = $db->sql_fetchrow($authresult)) {


        if ($PHP_AUTH_USER==$getauth['login'] AND md5($PHP_AUTH_PW)==trim($getauth['password_md5'])) {


          $allowPassageToAdmin = TRUE;


          break;


        }


      }


      if (!$allowPassageToAdmin) {


        header("WWW-Authenticate: Basic realm=Protected");


        header("HTTP/1.0 401 Unauthorized");


        die(_AB_GETOUT);


      }


    }


  }


}

Comment out the first and last line like:

Code:

//if(ini_get("register_globals")) {


  $sapi_name = strtolower(php_sapi_name());


  $apass = $db->sql_numrows($db->sql_query("SELECT * FROM ".$prefix."_nsnst_admins WHERE password_md5=''"));


  if($apass > 0 AND $ab_config['http_auth'] == 1) {


    @require_once("admin/modules/nukesentinel/functions.php");


    absave_config("http_auth",'0');


  }


  if($ab_config['http_auth'] == 1 AND strpos($sapi_name,"cgi")===FALSE) {


    if (basename($_SERVER['PHP_SELF'], '.php')==$admin_file) {


      $allowPassageToAdmin = FALSE;


      $authresult = $db->sql_query("SELECT login, password_md5 FROM ".$prefix."_nsnst_admins");


      while ($getauth = $db->sql_fetchrow($authresult)) {


        if ($PHP_AUTH_USER==$getauth['login'] AND md5($PHP_AUTH_PW)==trim($getauth['password_md5'])) {


          $allowPassageToAdmin = TRUE;


          break;


        }


      }


      if (!$allowPassageToAdmin) {


        header("WWW-Authenticate: Basic realm=Protected");


        header("HTTP/1.0 401 Unauthorized");


        die(_AB_GETOUT);


      }


    }


  }


//}