register_globals on

cobalt · February 26th, 2008, 10:19 PM

register_globals is going to drive me CRAZY.

I have a reseller account with surpass.

one of the domains abcd.com is mostly a testing site.
abcd.com has phpwebgallery, wordpress, drupal plus a couple others installed (not through cpanel)

abcd.com/phpwebgallery
abcd.com/wordpress
abcd.com/drupal

I installed a plugin for wordpress which is giving the error.
ERROR: register_globals is enabled. This is a security risk and also prevents TDO Mini Forms from working.
...which is understandable.

Could an admin at surpass look into what the register_globals is set to on my server? I may need to have it set to "OFF"

This gave pretty bad errors. I placed the .htaccess file in the root of the site, the root of wordpress...

.htaccess
php_flag register_globals on

Any insight would be helpful.

**benjamin** · February 26th, 2008, 11:31 PM

Having it on usually doesn't cause scripts to fail but is a security risk for programs such as phpBB. It can be turned off on a domain basis.

cobalt · February 26th, 2008, 11:44 PM

how do I go about getting register-globals shut off?
If a sys-op is around, I'd appreciate it. thank-you !

**David** · February 26th, 2008, 11:59 PM

PHP: Using Register Globals - Manual

**cowboy** · February 27th, 2008, 12:02 AM

With phpSUexec, you do not configure php with .htaccess but rather with a php.ini file in the calling directory. Make a text file named php.ini and put the line:

Code:

register_globals = 0

in it and upload to your top directory of the script that is causing the error (wordpress). Remove any reference in the .htaccess file.

**David** · February 27th, 2008, 12:05 AM

Ah, yes.

Believe Cowboy, for I am certain he invented all things internet.

cobalt · February 27th, 2008, 12:28 AM

oops. I spoke too early.

Is there some way to figure out what is going on? I've followed Cowboy's advice, and it's still giving me the same error.

ERROR: register_globals is enabled. This is a security risk and also prevents TDO Mini Forms from working.

**MarkRH** · February 27th, 2008, 12:45 AM

Make a file called phpinfo.php in the same directory that this script is in and put the following in it:

PHP Code:


			
<?php

phpinfo();

?>

Then, look at the Loaded Configuration File file path setting to find out if PHP is loading the local copy of PHP.INI or the server one. For example, mine is: /home/(my user name)/public_html/php.ini

If it only seems to be loading the server one, then support needs to change PHP's behavior on that server to load a local PHP.INI file if it sees one.

**cowboy** · February 27th, 2008, 12:53 AM

register_globals should be off by default. A phpinfo.php file will give you the server setting. If the plugin involves any of the other scripts, try putting a copy of that php.ini file in each of those directories as well as the public_html directory. + (drupal, wordpress, and phpwebgallery.)

If that does not turn them off, the master php.ini file for the server might have local php.ini directives disabled, and you will have to submit a ticket.

February 26th, 2008, 10:19 PM	#1 (permalink)
cobalt Registered User Fresh Surpasser Joined in Sep 2004 10 posts Gave thanks: 2 Thanked 0 times	register_globals on register_globals is going to drive me CRAZY. I have a reseller account with surpass. one of the domains abcd.com is mostly a testing site. abcd.com has phpwebgallery, wordpress, drupal plus a couple others installed (not through cpanel) abcd.com/phpwebgallery abcd.com/wordpress abcd.com/drupal I installed a plugin for wordpress which is giving the error. ERROR: register_globals is enabled. This is a security risk and also prevents TDO Mini Forms from working. ...which is understandable. Could an admin at surpass look into what the register_globals is set to on my server? I may need to have it set to "OFF" This gave pretty bad errors. I placed the .htaccess file in the root of the site, the root of wordpress... .htaccess php_flag register_globals on Any insight would be helpful. __________________ web> http://www.shootedit.com server name> pass48.dizinc.com

February 26th, 2008, 11:31 PM	#2 (permalink)
benjamin Sur, pass the salt Excelling Contributor Joined in Sep 2005 Lives in kayla's dvd-rw tray Hosted on Pass44 768 posts Gave thanks: 40 Thanked 51 times	Having it on usually doesn't cause scripts to fail but is a security risk for programs such as phpBB. It can be turned off on a domain basis. __________________ Benjamin Server: Pass44

February 26th, 2008, 11:44 PM	#3 (permalink)
cobalt Registered User Fresh Surpasser Joined in Sep 2004 10 posts Gave thanks: 2 Thanked 0 times	is there a surpass sys-op around? how do I go about getting register-globals shut off? If a sys-op is around, I'd appreciate it. thank-you ! __________________ web> http://www.shootedit.com server name> pass48.dizinc.com

February 27th, 2008, 12:02 AM	#5 (permalink)
cowboy Surpass Fan Excelling Contributor Joined in Nov 2005 Lives in Colorado Hosted on DEDI 934 posts Gave thanks: 2 Thanked 94 times	With phpSUexec, you do not configure php with .htaccess but rather with a php.ini file in the calling directory. Make a text file named php.ini and put the line: Code: register_globals = 0 in it and upload to your top directory of the script that is causing the error (wordpress). Remove any reference in the .htaccess file. __________________ Where would you be if you were at the highest court in the land (US)?

February 27th, 2008, 12:28 AM	#7 (permalink)
cobalt Registered User Fresh Surpasser Joined in Sep 2004 10 posts Gave thanks: 2 Thanked 0 times	oops. I spoke too early. Is there some way to figure out what is going on? I've followed Cowboy's advice, and it's still giving me the same error. ERROR: register_globals is enabled. This is a security risk and also prevents TDO Mini Forms from working. __________________ web> http://www.shootedit.com server name> pass48.dizinc.com

February 26th, 2008, 11:59 PM	#4 (permalink)
David I'm Dope as Crack Resident. Joined in Mar 2004 Lives in Asheboro, NC Hosted on Pass 7 13,036 posts Gave thanks: 7 Thanked 29 times	PHP: Using Register Globals - Manual

February 27th, 2008, 12:05 AM	#6 (permalink)
David I'm Dope as Crack Resident. Joined in Mar 2004 Lives in Asheboro, NC Hosted on Pass 7 13,036 posts Gave thanks: 7 Thanked 29 times	Ah, yes. Believe Cowboy, for I am certain he invented all things internet.

February 27th, 2008, 12:45 AM	#8 (permalink)
MarkRH Race Surpass Super #1 Joined in Jul 2006 Lives in Oklahoma City, OK Hosted on sh102 1,218 posts Gave thanks: 18 Thanked 86 times	Make a file called phpinfo.php in the same directory that this script is in and put the following in it: PHP Code: `<?php phpinfo(); ?>` Then, look at the Loaded Configuration File file path setting to find out if PHP is loading the local copy of PHP.INI or the server one. For example, mine is: /home/(my user name)/public_html/php.ini If it only seems to be loading the server one, then support needs to change PHP's behavior on that server to load a local PHP.INI file if it sees one. __________________ SH102 : Mark Headrick - Blog - Gallery Pelicar \| Company of Valor \| Mysstie Wolfestar

February 27th, 2008, 12:53 AM	#9 (permalink)
cowboy Surpass Fan Excelling Contributor Joined in Nov 2005 Lives in Colorado Hosted on DEDI 934 posts Gave thanks: 2 Thanked 94 times	register_globals should be off by default. A phpinfo.php file will give you the server setting. If the plugin involves any of the other scripts, try putting a copy of that php.ini file in each of those directories as well as the public_html directory. + (drupal, wordpress, and phpwebgallery.) If that does not turn them off, the master php.ini file for the server might have local php.ini directives disabled, and you will have to submit a ticket. __________________ Where would you be if you were at the highest court in the land (US)?

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Rate This Thread
Rate This Thread: