Textpattern CMS support forum
You are not logged in. Register | Login | Help
- Topics: Active | Unanswered
Pages: 1
#1 2009-07-25 08:03:32
- Gallex
- Member
- Registered: 2006-10-08
- Posts: 1,308
[resolved] register globals: off
is it impacts txp somehow if i ask webhost to turn php setting register globals off?
some security experts claim that having the PHP setting register_globals enabled on your webserver is a bad idea in terms of security. It’s strongly recommended to turn it off.
Offline
Re: [resolved] register globals: off
Hi Gallex,
is it impacts txp somehow if i ask webhost to turn php setting register globals off?
No, you can and should do this.
some security experts claim that having the PHP setting register_globals enabled on your webserver is a bad idea in terms of security. It’s strongly recommended to turn it off.
That’s right. It’s a bad idea if you have some old script that makes usage of non initializized global variables. If you run only TXP it doesn’t matter if it’s enabeld or not. But disabling register_golbals is a good idea, anway.
Digital nomad, sailing the world on a sailboat: 32fthome.com
Offline
Re: [resolved] register globals: off
PHP manual on using register globals
This feature has been DEPRECATED as of PHP 5.3.0 and REMOVED as of PHP 6.0.0. Relying on this feature is highly discouraged.
TXP doesn’t rely on it in any way. It’s recommended that you turn it off.
In fact, for some PHP versions the TXP diagnostics screen will show this warning:
Your version of PHP has security related risks. Please turn register_globals off or update to a newer PHP version.
Offline
Pages: 1