Go to main content

Textpattern CMS support forum

You are not logged in. Register | Login | Help

#1 2009-07-25 08:03:32

Gallex
Member
Registered: 2006-10-08
Posts: 1,289

[resolved] register globals: off

is it impacts txp somehow if i ask webhost to turn php setting register globals off?
some security experts claim that having the PHP setting register_globals enabled on your webserver is a bad idea in terms of security. It’s strongly recommended to turn it off.

Offline

#2 2009-07-25 09:00:31

trenc
Plugin Author
From: Amsterdam
Registered: 2008-02-27
Posts: 571
Website GitHub

Re: [resolved] register globals: off

Hi Gallex,

is it impacts txp somehow if i ask webhost to turn php setting register globals off?

No, you can and should do this.

some security experts claim that having the PHP setting register_globals enabled on your webserver is a bad idea in terms of security. It’s strongly recommended to turn it off.

That’s right. It’s a bad idea if you have some old script that makes usage of non initializized global variables. If you run only TXP it doesn’t matter if it’s enabeld or not. But disabling register_golbals is a good idea, anway.

Offline

#3 2009-07-25 10:09:59

ruud
Developer Emeritus
From: a galaxy far far away
Registered: 2006-06-04
Posts: 5,068
Website

Re: [resolved] register globals: off

PHP manual on using register globals

This feature has been DEPRECATED as of PHP 5.3.0 and REMOVED as of PHP 6.0.0. Relying on this feature is highly discouraged.

TXP doesn’t rely on it in any way. It’s recommended that you turn it off.
In fact, for some PHP versions the TXP diagnostics screen will show this warning:

Your version of PHP has security related risks. Please turn register_globals off or update to a newer PHP version.

Offline

Board footer

Powered by FluxBB