soycharliente Posted November 6, 2008 Share Posted November 6, 2008 I'm trying to install MediaWiki and it's giving me a warning that register_globals is on. "MediaWiki will work, but your server is more exposed to PHP-based security vulnerabilities." How would I go about disabling that? I have no idea where to start looking. I thought I would ask here before I tried to ask my never helpful hosting company. Thanks. Link to comment https://forums.phpfreaks.com/topic/131675-solved-turning-off-register_globals/ Share on other sites More sharing options...
DeanWhitehouse Posted November 6, 2008 Share Posted November 6, 2008 PHP manual? http://uk3.php.net/manual/en/ini.core.php#ini.register-globals http://uk3.php.net/register_globals Link to comment https://forums.phpfreaks.com/topic/131675-solved-turning-off-register_globals/#findComment-683911 Share on other sites More sharing options...
flyhoney Posted November 6, 2008 Share Posted November 6, 2008 If MediaWiki uses a .htaccess file you can add the following to that file: php_flag register_globals off Link to comment https://forums.phpfreaks.com/topic/131675-solved-turning-off-register_globals/#findComment-683916 Share on other sites More sharing options...
soycharliente Posted November 6, 2008 Author Share Posted November 6, 2008 I don't see an .htaccess file in the MediaWiki directory or anywhere else outside that folder. Should I ask my host if I can just create one? Would that have an affect on anything? It would only contain 1 rule I guess. Link to comment https://forums.phpfreaks.com/topic/131675-solved-turning-off-register_globals/#findComment-683925 Share on other sites More sharing options...
DeanWhitehouse Posted November 6, 2008 Share Posted November 6, 2008 My post should fix it, create a php.ini file. Link to comment https://forums.phpfreaks.com/topic/131675-solved-turning-off-register_globals/#findComment-683934 Share on other sites More sharing options...
soycharliente Posted November 6, 2008 Author Share Posted November 6, 2008 My hosting company put a php.ini file on the server. They said it was always there, but it wasn't. I don't really understand why they would do that, but whatever. It's there now and it's fixed. Thanks. Link to comment https://forums.phpfreaks.com/topic/131675-solved-turning-off-register_globals/#findComment-683968 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.