> ISP will not turn it off on server, so I wanted to do it myself for my > domain. > > Mike
You can turn off register_globals for an entire server in the php.ini file. Since this won't work for you, the sysadmins could turn it off for your virtual host in the Apache configuration file using directives like php_value or php_admin_value. The .htaccess file can appear in a web directory. If your virtual host has certain AllowOverride permissions you can place Apache directives to change the way it behaves for your site. Normally the statements in a .htaccess apply to the directory in which it is placed along with any subdirectories until the value is changed with another .htaccess file. If you had PHP statements or functions which you wanted to be included at the top of every PHP page you could use the auto_prepend statement in php.ini or elsewhere to cause a file to be read in at the top of every PHP program. You can also use the PHP function ini_set() to set most values which can be set in the php.ini file. Even when register_globals is on you can still access values from the various superglobals like $_POST and $_GET. If you are careful to set initial values in each of your variables, the security risk from having register_globals on can be minimized. I would guess that they are leaving it on for some application they use such as an older bulletin board or something. It is somewhat foolish but they probably have their reasons. James _____ James D. Keeline http://www.Keeline.com http://www.Keeline.com/articles http://Stratemeyer.org http://www.Keeline.com/TSCollection http://www.ITeachPHP.com -- Free Computer Classes: Linux, PHP, etc. Spring Semester Begins Jan 31 -- New Classes Start Every Few Weeks. Community email addresses: Post message: [email protected] Subscribe: [EMAIL PROTECTED] Unsubscribe: [EMAIL PROTECTED] List owner: [EMAIL PROTECTED] Shortcut URL to this page: http://groups.yahoo.com/group/php-list Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/php-list/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
