I didn't know that.  Thanks for the info.  I think it would be best that I
not use php.ini.

I can write the script to register the variable.  What would be a demo
script that would work?  I'm having a little trouble understanding that on
the php.net website.  Most of the script that use global variables came from
hyperlinks.  I have no form method like "post" or "get".

I have one website that use session.  Like session_start(),
session_register(), etc.  How would this be affected and what is the work
around to this one.


"Jay Blanchard" <[EMAIL PROTECTED]> wrote in message
> [snip]
> I'm using UNIX, not windows, so there is no php.ini in UNIX.
> [/snip]
> Look here /etc/apache/php.ini-dist or /etc/apache/php.ini. There is an ini
> file for PHP, and you may have to rename php.ini-dist to php.ini. Once
> look for
> ; You should do your best to write your scripts so that they do not
> ; register_globals to be on;  Using form variables as globals can easily
> lead
> ; to possible security problems, if the code is not very well thought of.
> register_globals = Off
> Setting Off to On will let your scripts continue to work, once you have
> restarted your server of course. You really should, due to security
> considerations leave this set of Off and reconfigure your variables as
> stated in other e-mails. Since this will probably take some time you can
> leave register_globals on until you're finished with that project.
> HTH!
> Jay

PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to