> On 08 Aug 2004, at 10:53, Tomas Kuliavas wrote:
> 
>> If you want quick solution - disable php register_globals. If other
>> scripts require it - do that for squirrelmail only
> 
> How would I disable register_globals for SM only?

php_flag register_globals off

this option can be added to httpd.conf

<directory /path/to/squirrelmail>
 php_flag register_globals off
</directory>

or in .htaccess file, if webserver allows controlling php settings with .htaccess 
files.

:) Good question would be "how would I enable register_globals for broken scripts 
only". Running with rg=on can cause security problems.

http://www.php.net/configuration.changes
-- 
Tomas


-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to