3 commits

Author	SHA1	Message	Date
Brion Vibber	a898dff34e	* Improved register_globals paranoia checks	2006-10-11 18:14:27 +00:00
Tim Starling	558487ceac	Active protection against register_globals vulnerabilities. Unset all globals which have been set by $_REQUEST, in WebStart.php. All entry points must assume that a user can unset any arbitrary global set before WebStart.php is invoked. This is not usually a problem since most entry points do not set globals before WebStart.php, Yuri's APIs apparently being the only exceptions.	2006-10-11 03:44:49 +00:00
Tim Starling	3ea576aa25	Consolidated web initialisation code into includes/WebStart.php. Moved profiling setup to a hook file "StartProfiler.php", following Brion's suggestion to merge Wikimedia's early profiling patch into subversion. Renamed Profiling.php and logProfilingData(), removed unnecessary wfProfileClose() calls.	2006-07-14 05:35:31 +00:00