Update to QSG Entry

Actually we are not adding a Register Globals emulation but we are removing the emulation that was included.

All support for register globals is being removed in the next version. The installer even includes a warning that the register globals configuration in PHP should be disabled before installing the game.

We will also be including a .htaccess file for the main directory that includes this line…

php_flag register_globals off

If the server allows .htaccess flags this will disable the register globals for all php files in the aatrade directory even if the server has it enabled.

We host quite a few commercial sites and some of them are quite large and security is one thing we try to stay on top of no matter what. In the game as soon as something like this comes up we try to get it fixed the day we find out about it. Fortunately, this is the only time we have had a security breach like this happen in the game.

Edited my blog entry – stupid mistake from me. Cool changes by the way – that puts you top of Maug’s secure php game examples. Over the summer I consulted on two closed source games having little else to do. Interesting work but security was non-existent on most. I’ve rarely seen so many developers get so paranoid in such a short time…:).

Heh heh…

If you host commercial web sites you learn to become paranoid pretty fast. It’s when you THINK you are secure and someone does something to show you aren’t that things get interesting.