PHP register_globals setting is `ON` instead of `OFF`

Moderators: cicans, TheHacker

Locked
nebojsha
Joomla! Intern
Joomla! Intern
Posts: 97
Joined: Wed Mar 14, 2007 7:59 pm

PHP register_globals setting is `ON` instead of `OFF`

Post by nebojsha » Fri Jun 08, 2007 11:49 am

Krenuo sam da instaliram Joomla! 12 i dobio ovu poruku - PHP register_globals setting is `ON` instead of `OFF` (javio mi je i problem sa RG_EMULATION, ali to sam lako sredio). Probao sam da napravim .htaccess fajl i u njega ubacim „php_flag register_globals off“, ali cim to uradim na sajtu dobijem poruku - 500 Internal Server Error. Takodje sam probao da htaccess.txt prebacim u .htaccess, sto prihvata bez problema, ali cim ubacim  php_flag register_globals off  odmah mi javi Internal Server Error. Imali neki drugi nacin da prebacim globals setting sa ON na OFF?

User avatar
Leftfield
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4432
Joined: Fri Dec 08, 2006 3:33 am
Contact:

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by Leftfield » Fri Jun 08, 2007 12:03 pm

Pisalo se :) ali daj taj htaccess odje da vidimo.
Vjerujem da si u global.php podesio: define('RG_EMULATION', 0 );
Joomla Templates and Plugins /https://youjoomla.com/

User avatar
BSD
Joomla! Ace
Joomla! Ace
Posts: 1948
Joined: Thu Aug 18, 2005 8:32 am
Location: Belgrade, Serbia
Contact:

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by BSD » Fri Jun 08, 2007 12:13 pm

Da li je PHP na tom serveru instaliran kao CGI ili kao modul za Apache?
Marko Milenović
Member of the Serbian Joomla! Translation Team
http://www.joomla-serbia.com/

nebojsha
Joomla! Intern
Joomla! Intern
Posts: 97
Joined: Wed Mar 14, 2007 7:59 pm

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by nebojsha » Fri Jun 08, 2007 12:41 pm

Da, u global.php sam podesio: define('RG_EMULATION', 0 ). Evo i htaccess.txt (isti je i .htaccess). Neznam kako je instaliran PHP, kako to da proverim?
You do not have the required permissions to view the files attached to this post.

User avatar
BSD
Joomla! Ace
Joomla! Ace
Posts: 1948
Joined: Thu Aug 18, 2005 8:32 am
Location: Belgrade, Serbia
Contact:

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by BSD » Fri Jun 08, 2007 12:50 pm

Odes u admin panel, u menij izaberes System --> System Info. Izaberes PHP Info iz podmenija. Videces verziju PHP-a i jos svasta nesto...4. red stoji za Server API. Sta pise desno od tog API?
Marko Milenović
Member of the Serbian Joomla! Translation Team
http://www.joomla-serbia.com/

nebojsha
Joomla! Intern
Joomla! Intern
Posts: 97
Joined: Wed Mar 14, 2007 7:59 pm

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by nebojsha » Fri Jun 08, 2007 1:17 pm

CGI. Jeli to dobro ili lose?
Last edited by nebojsha on Fri Jun 08, 2007 1:52 pm, edited 1 time in total.

User avatar
BSD
Joomla! Ace
Joomla! Ace
Posts: 1948
Joined: Thu Aug 18, 2005 8:32 am
Location: Belgrade, Serbia
Contact:

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by BSD » Fri Jun 08, 2007 2:36 pm

Kod Apache to i nije tako dobro sto se performansi tice..jedino ako je koriscen FastCGI onda je OK...mada mislim da ovde nije FastCGI nego obican CGI. No, to nije vazno. Sacuvaj taj htaccess koji imas i napravi jedan prazan. U njega stavi samo ovo:

php_flag register_globals 0

I javi da li sad radi. I jos nesto, ne znam kako ti je podesen Apache, ali iz bezbednosnih razloga dodaj i ovo:

Code: Select all

<Files ".ht*">
deny from all
</Files>
To ce spreciti ucitavanje .htaccess fajla i browseru..nije da ce ljudi videti nesto posebno u ovom fajlu ali sto bi ga citali?:D
Marko Milenović
Member of the Serbian Joomla! Translation Team
http://www.joomla-serbia.com/

nebojsha
Joomla! Intern
Joomla! Intern
Posts: 97
Joined: Wed Mar 14, 2007 7:59 pm

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by nebojsha » Fri Jun 08, 2007 2:59 pm

Ne, i dalje mi javlja Eror cim ubacim .htaccess fajl (napravio sam novi fajl, kao sto si mi rekao).

Idem od pocetka: Iskopirao sam Joomla! 12 na sajt, pre toga sam pomocu cpanel-a otvorio bazu, pokrenuo instalaciju i, s obzirom na poruku nisam nastavio dalje. Da li da zavrsim instalaciju sa register_globals settin ON, pa posle da probam sa .htaccess fajlom, ili to nema nikakve veze?

User avatar
Leftfield
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4432
Joined: Fri Dec 08, 2006 3:33 am
Contact:

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by Leftfield » Fri Jun 08, 2007 5:45 pm

Napravi php.ini fajl.
U njega upisi sledeće:
register_globals = off

Iskopiraj ga u ama bas svaki folder, od roota joomle do zadnjeg.
Joomla Templates and Plugins /https://youjoomla.com/

nebojsha
Joomla! Intern
Joomla! Intern
Posts: 97
Joined: Wed Mar 14, 2007 7:59 pm

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by nebojsha » Sat Jun 09, 2007 2:38 pm

Ne, nije ni to pomoglo. Pokusacu sve da obrisem i ponovo pokrenem instalaciju. Ako obet budem imao isti problem - promenicu hosting.

Hvala na podrsci, u svakom slucaju.

User avatar
Leftfield
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4432
Joined: Fri Dec 08, 2006 3:33 am
Contact:

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by Leftfield » Sat Jun 09, 2007 3:58 pm

Cek cek... zasto bi to radio.
Evo ti ova dva fajla (php.ini i ConfigurePHP.php).
Preimenuj php.ini.txt u php.ini i ConfigurePHP.php.txt u ConfigurePHP.php.

Configuration.php stavis u root i pokrenes: http://www.imetvogsajta.com/ConfigurePHP.php

Obadva u atacmentu.
You do not have the required permissions to view the files attached to this post.
Joomla Templates and Plugins /https://youjoomla.com/

nebojsha
Joomla! Intern
Joomla! Intern
Posts: 97
Joined: Wed Mar 14, 2007 7:59 pm

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by nebojsha » Tue Jun 12, 2007 2:58 pm

Skinuo fajlove, reimenovao ih, iskopirao gde treba, pokrenuo program, proverio na SCAN da li je sve gde treba, odradio ostalo (fin skript, moram da priznam), ali i dalje mi stoji PHP register_globals setting is `ON` instead of `OFF`.

Inace uradio sam update sa Joomla! 10 na 12 na drugom sajtu koji mi je na e-hostu i tamo se poruka PHP register_globals setting is `ON` instead of `OFF`izgubila posto sam u .htaccess fajl ubacio - php_flag register_globals 0. Cisto da pomenem, ako nekom zatreba.

Na ovom hostu (znam samo da je neki americki preko nekog tamo...) nista od ovoga sto je gore navedeno ne funkcionise.

User avatar
Leftfield
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 4432
Joined: Fri Dec 08, 2006 3:33 am
Contact:

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by Leftfield » Tue Jun 12, 2007 4:41 pm

nebojsha wrote: Skinuo fajlove, reimenovao ih, iskopirao gde treba, pokrenuo program, proverio na SCAN da li je sve gde treba, odradio ostalo (fin skript, moram da priznam), ali i dalje mi stoji PHP register_globals setting is `ON` instead of `OFF`.
Nema sto da brines, iskljuceno je sigurno. Sad nek pise sto hoce :), normalno samo ako je odradjeno kako treba.
Joomla Templates and Plugins /https://youjoomla.com/

gsasa
Joomla! Intern
Joomla! Intern
Posts: 53
Joined: Sun May 14, 2006 11:16 am
Location: Banjaluka Bosna i Hercegovina
Contact:

Re: PHP register_globals setting is `ON` instead of `OFF`

Post by gsasa » Wed Mar 26, 2008 10:31 am

Pozdrav. Postupio sam po uputstvu, tj. php.ini file sam stavio u sve joomla foldere gdje ima .php fajlova, ali mi opet izbacuje poruku da je register_globals ukljucen. Ne mogu sa ove teme taj configure.php file skinuti da skeniram da li je sve ok. Pise da su txt fajlovi deaktivirani. Mozete li to negdje ponovo postaviti?
Signature rules: Literal URLs only - http://forum.joomla.org/viewtopic.php?f=8&t=65


Locked

Return to “Bezbednost”