information about administrative restrictions in bug_report plugin

[squirrelmail.git] / src / configtest.php

diff --git a/src/configtest.php b/src/configtest.php
index 1710aade294f05b0d9eb803589af42a4f0dca0b8..1c0bb7621288b97eb80b91049c828064abffc3cf 100644 (file)
--- a/src/configtest.php
+++ b/src/configtest.php
@@ -3,9 +3,8 @@
 /**
  * SquirrelMail configtest script
  *
- * Copyright (c) 2003-2005 The SquirrelMail Project Team
- * Licensed under the GNU GPL. For full terms see the file COPYING.
- *
+ * @copyright © 2003-2005 The SquirrelMail Project Team
+ * @license http://opensource.org/licenses/gpl-license.php GNU Public License
  * @version $Id$
  * @package squirrelmail
  * @subpackage config
@@ -122,6 +121,21 @@ if (function_exists('mb_internal_encoding') &&
     do_err($mb_error);
 }
 
+/**
+ * We code with register_globals = off. SquirrelMail should work in such setup
+ * since 1.2.9 and 1.3.0. Running SquirrelMail with register_globals = on can
+ * cause variable corruption and security issues. Globals can be turned off in
+ * php.ini, webserver config and .htaccess files. Scripts can turn off globals only
+ * in php 4.2.3 or older.
+ */
+if ((bool) ini_get('register_globals')) {
+    $rg_error='You have enabled php register_globals.'
+        .' Running PHP installation with register_globals=on can cause problems.'
+        .' See <a href="http://www.php.net/manual/en/security.registerglobals.php">'
+        .'security information about register_globals</a>.';
+    do_err($rg_error);
+}
+
 /* checking paths */
 
 echo "Checking paths...<br />\n";