You cannot use ini_set() for register_globals. It must be done from .htaccess, httpd.conf or php.ini. http://www.php.net/manual/en/function.ini-set.php
Edward Dudlik "Those who say it cannot be done should not interrupt the person doing it." wishy washy | www.amazon.com/o/registry/EGDXEBBWTYUU ----- Original Message ----- From: "J. Cox" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, 19 October, 2003 20:30 Subject: [PHP] Re: Session hijacking "Ryan A" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > NO! Globals are on.... > And asking the others they tell me that around 20% of the scripts (around > 300 scripts) wont function with globals off :-( > > What to do? Use an ini_set in your sessions script (I am assuming that you are using a seperate script to manage your sessions) to turn your registered globals off. Likewise though, you might start looking for replacements for those scripts as it takes time to make the changes, but it has been a year since register_globals were turned off by default and mentioned that they were going away in the future. In addition, take a look at some of the other suggestions that were made, beyond this one. J. Cox http://www.xaraya.com -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
