note 26278 deleted from security.globals by aidan
| From: | aidan@php.net | Date: | Thu, 09 Sep 2004 09:16:53 +0000 |
| Subject: | note 26278 deleted from security.globals by aidan | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-76302@lists.php.net to get a copy of this message | ||
Note Submitter: nhallman [at] ciu [dot] edu
----
It's possible to set register_globals to "off" on a site-by-site basis via Apache,
thus overriding the "global" setting of register_globals in php.ini:
In httpd.conf:
<VirtualHost 127.0.0.1>
ServerName localhost
DocumentRoot /var/www/html/mysite
php_value register_globals 0 (or 1 for "on")
</VirtualHost>
That way, sites with old code can have register globals turned on, but for all new developments it
will be disabled.