Re: How unsafe is register_globals?

On Thursday 17 July 2003 15:07, Paul Chvostek wrote: > > Take control of the setting yourself by setting it httpd.conf, inside the > > container of the virtual host in question. > > Not so easy with mod_vhost_alias, given that I want it to apply only to > certain users, and possibly only for directories for those users. OK, try adding the settings into directory containers for those special cases -- I've never tried this scenario before so there's no certainty that it'll work. > The .htaccess solution is the right one unless "AllowOverride Options" > allowed the user to turn off safe_mode and open_basedir. I don't have a > non-production machine to test it on at the moment. > > Any idea how I give the user local register_globals control without also > letting them alter the other php.ini options? No idea. AFAIK the restrictions that you can place on what .htaccess can control are internal to apache. -- Jason Wong -> Gremlins Associates -> www.gremlins.biz Open Source Software Systems Integrators * Web Design & Hosting * Internet & Intranet Applications Development * ------------------------------------------ Search the list archives before you post http://marc.theaimsgroup.com/?l=php-general ------------------------------------------ /* An evil mind is a great comfort. */