only allowing php_flag register_globals off
| From: | Karin van den Berg | Date: | Fri, 29 Apr 2005 14:51:16 +0000 |
| Subject: | only allowing php_flag register_globals off | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-214212@lists.php.net to get a copy of this message | ||
Hi,
I am on a quest for a new good webhost and I am currently using a trail
account at a host that seems pretty good, but has one problem. I cannot
turn register_globals off. They don't allow php_flag/php_value in
.htaccess for security reasons but in this case it's causing insecurity
It's not that I can't code secure enough code to deal with this, but I'm
also running other (public) php applications, and I just want
register_globals off, period. I have tried to convince the sysadmin to
find a way to turn it off just for my account but I think they don't
want to set up individual configs or something.
One final way I want to try to convince him is to allow the
register_globals php_flag only in the general configuration, so that you
can only use this flag and no others. That way, the only thing allowed
is actually closing a security risk. B
But I can't find any info on this, is there a way to configure apache
and/or PHP so that you allow only one type of php_flag?
Please help me, I've been looking for a host for ages and I'm really
getting tired of this :-(
Thanks a million!
Karin