Textpattern CMS support forum
You are not logged in. Register | Login | Help
- Topics: Active | Unanswered
php_value register_globals 0 in .htaccess file
Hello-
I know next to nothing about php, and am hoping someone can help me out. I have Textpattern up and running successfully on my domain, with the line “php_value register_globals 0” active in my .htaccess file. It was originally commented out, but I uncommented it after Textpattern barked at me saying it was a security risk. Now that I’ve uncommented the line, Textpattern is happy, but other applications my provider has installed for me (SpamVault, etc) blow up when run. Right now I have to manually go in and comment out the line temporarily if I want to run any of these applications. Needless to say, this is a real pain. Can anybody provide a solution that will enable me to run these applications and keep Textpattern happy as well? If not, how much risk am I actually taking by leaving the line commented out? Thanks!
- Dave
Offline
#2 2006-05-12 23:45:14
- Mary
- Sock Enthusiast
- Registered: 2004-06-27
- Posts: 6,236
Re: php_value register_globals 0 in .htaccess file
Textpattern doesn’t need register_globals off to “be happy”.
That message is a warning that operating with them on is a potential security risk for your server, so it’s a good idea to find scripts that do not make use of this functionality, whenever you can.
Now, I assume that you have Textpattern in your root directory and these other programs are in sub-folders? If you want to turn them off for Textpattern, but leave them on for programs that need it, you can uncomment that line in your Textpattern .htaccess, and then create a new .htaccess which you will put in those other programs’ directories: php_value register_globals 1.
Offline
Re: php_value register_globals 0 in .htaccess file
Thanks very much!
Offline