Disabling register_globals?

[subcon-fusion.com]

I'm just about to install PP but it's telling me register_globals is enabled.

What are the security risks of leaving it enabled? And how do I disable it?

Thanks

[Dkozikowski]

Do a quick google search on the effects of register_globals.

Pixelpost 1.7.1 will work fine and be just as secure if register_globals was disabled.

Most people prefer it to be disabled. If you have control of your php.ini file (most don't) then I would disable it from within.

You can also try the .htaccess route.
As I understand, not all hosts allow this but you can give it a shot.

In your html root directory, create a plain text file (if not already created) and save it as .htaccess and NOT .htaccess.txt

within this file add the following line:


php_flag register_globals off


If all else fails, you'll have to contact your host and ask them nicely to turn it off for you.

[subcon-fusion.com]

ok thanks. if it's just as secure i'm not too bothered