Web Hosting Forums

Results 1 to 2 of 2

This is a discussion on How-To: disable register_globals for your account in the Hosting Talk & Chit-chat forum
You can disable register_globals off for php in your account by setting this directive in .htaccess in public_html folder: php_flag register_globals off ...

  1. #1
    CTO JPC-Masood's Avatar
    Join Date
    Aug 2002
    Location
    Jaguar Servers
    Posts
    1,916

    How-To: disable register_globals for your account

    You can disable register_globals off for php in your account by setting this directive in .htaccess in public_html folder:

    php_flag register_globals off
    [COLOR="DarkRed"]Masood N. [/COLOR] | [COLOR="Red"]Chief Technical Officer[/COLOR][SIZE="3"] JaguarPC.com[/SIZE]

  2. #2
    Yeah, I know a LOT! Vin DSL's Avatar
    Join Date
    Mar 2003
    Location
    Arizona Uplands
    Posts
    10,661
    Thanks!

    I've been doing this for a long time. I also disable error displaying - gives a blank white screen on errors, instead of reporting server paths.

    Put this near the top of your .htaccess file...
    Code:
    # Offers protection during hacking attempts by NOT displaying
    # error messages, server paths, and turning off your globals.
    php_flag display_errors off
    php_flag register_globals off
    This forces hackers to work in the blind, and makes 'their job' much harder...
    DISCLAIMER Any resemblance between the views expressed above and those of the owners and operators of this system is purely coincidental. Any resemblance between these views and my own are non-deterministic. The existence of Vin DSL is questionable. The existence of views in the absence of anyone to hold them is problematic. The existence of the reader is left as an exercise in the second-order coefficient.

    No Guts, No Story! VinDSL 2010

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •