Re: How unsafe is register_globals?

On Thursday 17 July 2003 13:06, Paul Chvostek wrote: > Perhaps that's where I need advice. Currently, a .htaccess file with: > > php_flag register_globals on > > gets the error "php_flag not allowed here". I see from the comments at > http://www.php.net/register_globals that I need AllowOverride > Options to > make that function ... but is it possible to have fine-grained enough an > AllowOverride statement that only register_globals can be changed? > > I wouldn't want a user to use his .htaccess file to turn off safe_mode > or open_basedir. Take control of the setting yourself by setting it httpd.conf, inside the container of the virtual host in question. -- Jason Wong -> Gremlins Associates -> www.gremlins.biz Open Source Software Systems Integrators * Web Design & Hosting * Internet & Intranet Applications Development * ------------------------------------------ Search the list archives before you post http://marc.theaimsgroup.com/?l=php-general ------------------------------------------ /* FORTUNE'S FUN FACTS TO KNOW AND TELL: #44 Zebras are colored with dark stripes on a light background. */