only allowing php_flag register_globals off

From: Date: Fri, 29 Apr 2005 14:51:16 +0000
Subject: only allowing php_flag register_globals off
Groups: php.general 
Request: Send a blank email to php-general+get-214212@lists.php.net to get a copy of this message
Hi, I am on a quest for a new good webhost and I am currently using a trail account at a host that seems pretty good, but has one problem. I cannot turn register_globals off. They don't allow php_flag/php_value in .htaccess for security reasons but in this case it's causing insecurity It's not that I can't code secure enough code to deal with this, but I'm also running other (public) php applications, and I just want register_globals off, period. I have tried to convince the sysadmin to find a way to turn it off just for my account but I think they don't want to set up individual configs or something. One final way I want to try to convince him is to allow the register_globals php_flag only in the general configuration, so that you can only use this flag and no others. That way, the only thing allowed is actually closing a security risk. B But I can't find any info on this, is there a way to configure apache and/or PHP so that you allow only one type of php_flag? Please help me, I've been looking for a host for ages and I'm really getting tired of this :-( Thanks a million! Karin

« previous php.general (#214212) next »