| Index: trunk/phase3/includes/WebStart.php |
| — | — | @@ -26,7 +26,7 @@ |
| 27 | 27 | # Protect against register_globals |
| 28 | 28 | # This must be done before any globals are set by the code |
| 29 | 29 | if ( ini_get( 'register_globals' ) ) { |
| 30 | | - if ( isset( $_REQUEST['GLOBALS'] ) ) { |
| | 30 | + if ( isset( $_REQUEST['GLOBALS'] ) || isset( $_FILES['GLOBALS'] ) ) { |
| 31 | 31 | die( '<a href="http://www.hardened-php.net/globals-problem">$GLOBALS overwrite vulnerability</a>'); |
| 32 | 32 | } |
| 33 | 33 | $verboten = array( |