php_value problems post upgrade to 0.8.2

[peteri]

I have now sorted out my problems with my upgrade from 0.7.1 to 0.8.2
It looks like somewhere in this sequence:
start with s9y 0.6.x
upgrade to 0.7.1
move server from debian linux box to darwin/MacOS
upgrade to 0.8.2
either my allowoverride directives got trashed (or cleaned up by an admin) OR nothing ever rewrote .htaccess until the upgrade to 0.8.2 (i.e. I still had the 0.6 version)

I've ended up commenting out these two php_value entries in .htaccess which has cured my problems.
#php_value session.use_trans_sid 0
#php_value register_globals off

Since the server I'm on is on PHP 4.3.2 the register_globals hopefully wouldn't do anything, but I'm interested to know what if any effect the missing session.use_trans_sid 0 would have? And should I worry about not having these in here anymore?

Serves me right for NOT taking a backup before I started but when did the php_value bits get added to s9y?

BTW this is mostly an information post

[garvinhicking]

The php_value bits should have gotten introduced in Serendipity 0.6 already. And yes, they depend on the AllowOverride directive!

Register_globals is deactivated for users not to submit global variables which could hack the applicaton (like index.php?serendipity[serendipityHTTPPath]=http://evilhost/). This is avoided in the code, so the PHP flag is just for additional safety.

Trans_sid is just to deactivate that the SID is propagated via the URLs and could mess up "pretty URLs".

Regards,
Garvin