[wp-forums] vuln

[Les Bessant]

Live chat? Allegedly, according to the support page (it's in beta), but I've
never seen it actually set as online.

There was some discussion in their forums back in May on the subject - their
position was they were leaving it on, even though it's no longer the PHP
default, as some scripts would break if they turned it off. 

They also pointed out that customers were allowed to compile and run their
own PHP installation with whatever settings they liked. Not all that helpful
to people who just want to download and use a standard package like WP, but
better than a poke in the eye, I suppose.

And one direct quote from someone who seems to work there:

"And again, there is nothing inherently wrong with register_globals. It only
makes it easier to do stupid things."


________________________________

Les Bessant les at lcb.me.uk
Losing it[1] - http://lcb.me.uk/

-----Original Message-----
From: wp-forums-bounces at lists.automattic.com
[mailto:wp-forums-bounces at lists.automattic.com] On Behalf Of Podz
Sent: 14 August 2005 10:58
To: wp-forums at lists.automattic.com
Subject: Re: [wp-forums] vuln

Given that DH are listed on the Hosting page and don't get harmed by 
that, I think they need to say something officially about this.
Do they have LiveChat with people who know what they are doing ?

P.

Les Bessant wrote:
> Yup, just a tick box (at Dreamhost, at least)
> 
> This is what they need to look at:
> 
> http://les-bessant.me.uk/cgi-php.jpg 
_______________________________________________
wp-forums mailing list
wp-forums at lists.automattic.com
http://lists.automattic.com/mailman/listinfo/wp-forums