Ninjakreborn Posted May 30, 2006 Share Posted May 30, 2006 I am having a major problem, I know enough about php to know register globals is a security issue, I tried installing os commerce, and zen shopping cart, one then the other, when I try to go to the admin area I get[!--quoteo--][div class=\'quotetop\']QUOTE[/div][div class=\'quotemain\'][!--quotec--]Server Requirement Error: register_globals is disabled in your PHP configuration. This can be enabled in your php.ini configuration file or in the .htaccess file in your catalog directory.[/quote]and I won't use something I have to enable register globals on, that is not good, I don't trust either of those if that's the case, and they are popular so I am assuming something is wrong, any ideas. Link to comment https://forums.phpfreaks.com/topic/10775-error-with-auto-install/ Share on other sites More sharing options...
poirot Posted May 30, 2006 Share Posted May 30, 2006 They may simply require register_globals to be on, probably because their code wasn't made for register_globals off and they're too lazy to modify it :lol:But since register_globals is PHP_INI_PERDIR:[!--quoteo--][div class=\'quotetop\']QUOTE[/div][div class=\'quotemain\'][!--quotec--]Entry can be set in php.ini, .htaccess or httpd.conf [/quote]So you can install the script in some directory and set register_globals on only in that dir Link to comment https://forums.phpfreaks.com/topic/10775-error-with-auto-install/#findComment-40244 Share on other sites More sharing options...
Ninjakreborn Posted May 30, 2006 Author Share Posted May 30, 2006 isn't that a bad idea, for security purposes though. I didn't think it would be at first, but I have heard some really bad things about using register_globals, and the bad thing is, I had this error message with OC Commerce, and Zen Shopping cart, and there 2 of the most popular that is what is confusing me. Link to comment https://forums.phpfreaks.com/topic/10775-error-with-auto-install/#findComment-40250 Share on other sites More sharing options...
poirot Posted May 30, 2006 Share Posted May 30, 2006 Yes, bad things can happen if someone codes a script that relies on register_globals AND has some vulnerability caused by it. But this doesn't mean these scripts are not secure enough.If you think ZenCart and OSCommerce guys can create a safe script, enable it PER DIR. Else, don't install the scripts and try to find something else. Link to comment https://forums.phpfreaks.com/topic/10775-error-with-auto-install/#findComment-40255 Share on other sites More sharing options...
Ninjakreborn Posted May 31, 2006 Author Share Posted May 31, 2006 Or can't I just download them, since there open source, and play with there php programming until I situate it to where they work with register globals on, it shouldn't take long to change all the variable with the proper $_POST, $_GET and whatever else is needed. Link to comment https://forums.phpfreaks.com/topic/10775-error-with-auto-install/#findComment-40676 Share on other sites More sharing options...
Advancewebsoft Posted July 1, 2006 Share Posted July 1, 2006 Hello,A register_globals=on is not a security issue for Oscommerce. Especially for Ms2.2 version. It have some vulnerabilites, of course,but very very low (i.e. someone could steal customers info - name, surname, telephone) - also not so easy. And thats all, no security leaks within register_globals. But if you wish to use register_globals=OFF besides, you could use one of the contributions made for this, search a community/ contributions of the official oscommerce site, or wait until MS3 release will be out - it will have this support. Link to comment https://forums.phpfreaks.com/topic/10775-error-with-auto-install/#findComment-51796 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.