[cellarius]

Originally Posted by ragtek

1. forgett define('NO_REGISTER_GLOBALS', 1);
2. include the csrf protection


We shouldn't start posting the outdated stuff

I totally agree, and that's why you really should add

PHP Code:

define('CSRF_PROTECTION', true); 


after

PHP Code:

define('NO_REGISTER_GLOBALS', 1); 
define('THIS_SCRIPT', 'test'); 


Thinking of it - I havn't seen NO_REGISTER_GLOBALS set in vB's core scripts since what, 3.0? I just checked and it vanished with 3.5, and in 4.0 there is no single reference to NO_REGISTER_GLOBALS that I can trace. Could it be that in fact this constant has been outdated for years but still makes it's way into modification codes because it was once needed years ago?