I didn't know that. Thanks for the info. I think it would be best that I
not use php.ini.
I can write the script to register the variable. What would be a demo
script that would work? I'm having a little trouble understanding that on
the php.net website. Most of the script that use global variables came from
hyperlinks. I have no form method like "post" or "get".
I have one website that use session. Like session_start(),
session_register(), etc. How would this be affected and what is the work
around to this one.
"Jay Blanchard" <[EMAIL PROTECTED]> wrote in message
> I'm using UNIX, not windows, so there is no php.ini in UNIX.
> Look here /etc/apache/php.ini-dist or /etc/apache/php.ini. There is an ini
> file for PHP, and you may have to rename php.ini-dist to php.ini. Once
> look for
> ; You should do your best to write your scripts so that they do not
> ; register_globals to be on; Using form variables as globals can easily
> ; to possible security problems, if the code is not very well thought of.
> register_globals = Off
> Setting Off to On will let your scripts continue to work, once you have
> restarted your server of course. You really should, due to security
> considerations leave this set of Off and reconfigure your variables as
> stated in other e-mails. Since this will probably take some time you can
> leave register_globals on until you're finished with that project.
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php