PHP register_globals setting is `ON` instead of `OFF`

[WebDesigner]

Hi,
I have this error:  PHP register_globals setting is `ON` instead of `OFF`  on my pages.  I have gone to the globals.php file and the file shows:  define( 'RG_EMULATION', 0 );

But I still get that error.  What am I missing?

Thanks
Sue

[wood_flower]

Put the following line of code to the .htaccess file found in your Joomla root directory (where configuration.php file exists):

Code: Select all

php_flag register_globals off

If your Joomla root directory does not already have .htaccess file, create one and put the above line of code to it.

[WebDesigner]

Thanks Wood Flower .. Okay I did that .  But there is a lot of junk in that file .. do I leave all that in there??  I hope I put it in the right place. 

I even put a # infront of it and it still doesn't work.  I still get that error.

thanks
Sue

[WebDesigner]

okay ..  my  mistake .. I was putting that in the htaccess.txt file ..  The htaccess file will not let me open it up ..  Now this is an install directly from my hosting control panel.  Since it wouldn't let me open that up, I put in a new one .. Now I can't even get to any of my pages at all.

I get this:  Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.

Sue

[wood_flower]

How about the content of the .htaccess file you created? Just the line of code i given or also the content from htaccess.txt file shipped with Joomla?

[WebDesigner]

okay.  I guess I'm not understanding this .  I uninstalled and reinstalled Joomla so that I would get the htaccess file it had in there.  I did get it to open and there was nothing there  .. 

But when I put php_flag register_globals off  in the file and upload it, I get the internal error.  When I put the # before it, or take it out, I can get in the site but it still shows that I have it on even tho it's show off.

So am I to put the code you gave me:  php_flag register_globals off  in the htaccess file and the htaccess.txt file??  I'm not understanding. 

thanks
Sue

[wood_flower]

If you are using Apache 2 then you should visit the URL below and read the comment made by hbinduni at gmail dot com:

http://www.php.net/register_globals

[wood_flower]

You should read also:

http://forum.mamboserver.com/showthread ... post128902

http://xoops.peak.ne.jp/md/d3forum/inde ... pic_id=571

[WebDesigner]

Well I will look at them but don't think they will do any good.  I don't understand what they are saying anyhow.  Guess I will either live with it the way it is or find another program to use.

Thanks for your quick response.

Sue

[teejay818]

Sue,

I am dealing with this issue now. In laymen's terms... this has to do with a setting on your hosting server. You can do some work arounds (found on this forum) but they may not work. That is the boat I am in too. The best answer is to change hosting. There is a list of joomla hosts with correct server environments in the FAQ, but I will add the link since it takes alot of time to learn your way around this forum... Lots of variation in price and services, so you may want to look through them all.

http://forum.joomla.org/index.php/topic,6856.0.html

Hope this helps cut past all the steps and gets you to where you want to go...

Tracy 

[WebDesigner]

Thanks Tracy, but I have been with this hosting company as a reseller for almost 6 years.  The Joomla program came from the server in the first place.  Don't think I want to change hosting company ..

Sue

[brad]

Thanks Tracy, but I have been with this hosting company as a reseller for almost 6 years.  The Joomla program came from the server in the first place.  Don't think I want to change hosting company ..

Sue

You might want to seriously consider it. A host that does not show, from their server settings that they care about security could have serious consequences to your business. But, it's your decision. All the best.

[WebDesigner]

hmmmm..  Didn't know any one said they didn't care about security ..  How did we get on the subject bashing my hosting company ..  I just wanted a way to show that the global setting was on OFF instead of ON.

Sue

[brad]

register_globals has been off by default in php4 for a long time. I'm not trying to bash your host, I don't even know who it is however, I am trying to point out that a host that by default ignores the php authors when it comes to security settings is a bit of a worry. It's a serverwide security risk.

[teejay818]

Thanks for confirming this decision. I signed up with a hosting company that claimed to be the #1 Joomla Host... NOT! Asked about the server setting and the support tech sent me that other hosting companies paid to be listed as a joomla host in the forum... This made me smile... Why? Because I have to migrate servers to get the server settings secure. My project is important (even if only in my own mind), and although pretty new to this, I want to protect it... Lesson learned: No one really cares about your project if you don't.

Have a good one.. 

[brad]

.. the support tech sent me that other hosting companies paid to be listed as a joomla host in the forum...

Just to make sure no one is confused, no host pays Joomla to be listed on our forum in this thread: http://forum.joomla.org/index.php/topic,6856.0.html

I know that is probably not what you mean't but I am just making sure.