Posted by Karin van den Berg on 04/29/05 17:51

Hi,

I am on a quest for a new good webhost and I am currently using a trail
account at a host that seems pretty good, but has one problem. I cannot
turn register_globals off. They don't allow php_flag/php_value in
..htaccess for security reasons but in this case it's causing insecurity

It's not that I can't code secure enough code to deal with this, but I'm
also running other (public) php applications, and I just want
register_globals off, period. I have tried to convince the sysadmin to
find a way to turn it off just for my account but I think they don't
want to set up individual configs or something.

One final way I want to try to convince him is to allow the
register_globals php_flag only in the general configuration, so that you
can only use this flag and no others. That way, the only thing allowed
is actually closing a security risk. B

But I can't find any info on this, is there a way to configure apache
and/or PHP so that you allow only one type of php_flag?

Please help me, I've been looking for a host for ages and I'm really
getting tired of this :-(

Thanks a million!

Karin

• Next in forum: check for alphanumeric characters
• Prev in forum: Re: POP access to gmail
• Thread view: only allowing php_flag register_globals off

[Reply to this message]