PHP register_globals?

[capnqwest]

By default, our installations here are register globals= on but everywhere I turn there's a security advisory against that. Who here has disabled it? Did it break anything? Thoughts?

[jpetrov]

me. for now no probs. i use mambo and wordpress for my sites.

[ozgreg]

The issue with turning off register_globals is the huge volume of php scripts (applications) in the marketplace and unknown quantity that one line in a popular application might be poorly coded and be effected by this php settings..

It is safer (or is that easier) to have them turned on that trying to debug why your php application under certain conditions does something it should not...

[PvUtrix]

I have it set to OFF...
It's on for a few domains though (.htaccess)

[elix]

I have it set to OFF...
It's on for a few domains though (.htaccess)
What .htaccess are you using to have it on?

[BornOnline]

What elix said..

I currently have it on...

[capnqwest]

Thanks guys, I think I'll leave it on for now.

[Fred]

yeah, as elix, i would like to know what is the .htaccess you are using to have it on on certain domain ?

[ozgreg]

yeah, as elix, i would like to know what is the .htaccess you are using to have it on on certain domain ?

add this line in your domain root .htaccess

php_flag register_globals 1

However this will only work if you are not using phpsuexec. If you are using phpsuexec you should be able to add this setting instead to php.ini located also in the domain root.

[elix]

add this line in your domain root .htaccess

php_flag register_globals 1

However this will only work if you are not using phpsuexec. If you are using phpsuexec you should be able to add this setting instead to php.ini located also in the domain root.
Ahhah, thanks :-)

[BornOnline]

I'm searching now, but does anyone know which Fantastico scripts need register globals on?