Wiccle.com in Facebook Wiccle.com in Twitter Wiccle.com in LinkedIn Wiccle.com in Youtube RSS from Wiccle.com Wiccle.com in Atom
 
 
 

Thread: FAQ: Register Globals directive must be off

Started: August 2, 2009, 12:24 AM  ⋅  Zone: Public Forums  ⋅  Category: FAQ  ⋅  Posts: 8  ⋅  Views 670
Started by: Markus  ⋅  Description: register_globals should always be turned off in your PHP installation, if it isn't already.
Post #1
Member: Markus  ⋅  Date: August 2, 2009, 12:24 AM  ⋅ Subject: "FAQ: Register Globals directive must be off"

Please note that the register_globals directive must be off in your PHP setup. If it is on, it is first of all a general security liability, and second, it can cause a number of problems with software coded for register_globals off --- such as the all the odd issues that arose after the recent security patch. Please turn register_globals off in your php.ini file, or ask your host to do it.


You should not use software that requires you to keep register_globals on. It has been deprecated since PHP 5.3.0, and will be entirely removed in PHP 6.0.0. To know if register_globals is on on your server, download the phpinfo script and upload it to your server, then open it in your browser and search for register_globals in the output; it will be "On" or "Off". If it's on, do whatever it takes to turn it off.

 

Post #2
Member: Markus  ⋅  Date: August 2, 2009, 12:45 AM  ⋅ Subject: "(No title)"

It is best to turn this directive off in your actual php.ini file. If you cannot do that, you can add the following directive into your .htaccess file:

php_flag register_globals off

You may also be able to upload a php.ini file with the right directive into your root public_html folder --- but not all hosts support either of these overrides.


If you or your hosting provider are unable to turn register_globals off, you can fix the issue by sticking any one of the alternative solutions at PHP.Net (linked above) into the beginning of your index.php file --- right after session_start(). (This is not officially supported however.)


iWiccle 1.10 will detect register_globals and eliminate them automatically as a matter of providing security in cases where the setting is accidentally left on. Still, for your own good, please turn it off, because it affects every one of your scripts, and may open mighty big security holes in some.

Post #3
Member: smith  ⋅  Date: August 12, 2009, 07:12 PM  ⋅ Subject: "iff this dont work"

On my webhost - www.unoeuro.com i have to use:

 

php_value register_globals 0

some also have to use this:

php_flag register_globals off

 

Have fun :)

Post #4
Member: Technoman  ⋅  Date: August 13, 2009, 01:19 AM  ⋅ Subject: "(No title)"

that looks ok to me smith

 

0 = means OFF ( im preety sure )

sometime this could also mean ON

 

markus will be albe to help you more on the technical aspect to this 99%

Post #5
Member: Markus  ⋅  Date: August 13, 2009, 02:51 AM  ⋅ Subject: "(No title)"

Yes, 0 would mean off here. Zero = disconnected, false, off, no. One = connected, true, on, yes.


0 would mean "yes" (as far as whether it's on or off goes) if it were phrased, deny_register_globals --- then 1 would mean register_globals is off (yes=denied), and 0 would mean it's on (no=allowed).

 

Post #6
Member: smith  ⋅  Date: August 13, 2009, 09:15 AM  ⋅ Subject: "(No title)"

Hi

 

Yeah, but in my case the "0" was doing the trick, i think it depends on your webhost installation.

 

 

Post #7
Member: Markus  ⋅  Date: August 13, 2009, 01:39 PM  ⋅ Subject: "(No title)"

Flags are used only for on/off, while values are used for a number of purposes --- hence the 0/1 switch.

 

FAQ

Add to Favorites
Public Forums
Category  ⋅  Frequently asked questions on all things Wiccle. If it's a common question, see here.
 

Public Forums

Add to Favorites
Public Forums
Zone  ⋅ Public forum sections for support and discussions. Available for everyone.
 

Zone Categories

 
Questions? Ask us!
Back to Top