View Full Version : Disabling register_globals?
05-09-2008, 12:53 PM
I'm just about to install PP but it's telling me register_globals is enabled.
What are the security risks of leaving it enabled? And how do I disable it?
05-10-2008, 01:31 AM
Do a quick google search on the effects of register_globals.
Pixelpost 1.7.1 will work fine and be just as secure if register_globals was disabled.
Most people prefer it to be disabled. If you have control of your php.ini file (most don't) then I would disable it from within.
You can also try the .htaccess route.
As I understand, not all hosts allow this but you can give it a shot.
In your html root directory, create a plain text file (if not already created) and save it as .htaccess and NOT .htaccess.txt
within this file add the following line:
php_flag register_globals off
If all else fails, you'll have to contact your host and ask them nicely to turn it off for you.
05-10-2008, 12:45 PM
ok thanks. if it's just as secure i'm not too bothered
vBulletin® v3.7.3, Copyright ©2000-2013, Jelsoft Enterprises Ltd.