soycharliente Posted November 6, 2008 Share Posted November 6, 2008 I'm trying to install MediaWiki and it's giving me a warning that register_globals is on. "MediaWiki will work, but your server is more exposed to PHP-based security vulnerabilities." How would I go about disabling that? I have no idea where to start looking. I thought I would ask here before I tried to ask my never helpful hosting company. Thanks. Quote Link to comment https://forums.phpfreaks.com/topic/131675-solved-turning-off-register_globals/ Share on other sites More sharing options...
DeanWhitehouse Posted November 6, 2008 Share Posted November 6, 2008 PHP manual? http://uk3.php.net/manual/en/ini.core.php#ini.register-globals http://uk3.php.net/register_globals Quote Link to comment https://forums.phpfreaks.com/topic/131675-solved-turning-off-register_globals/#findComment-683911 Share on other sites More sharing options...
flyhoney Posted November 6, 2008 Share Posted November 6, 2008 If MediaWiki uses a .htaccess file you can add the following to that file: php_flag register_globals off Quote Link to comment https://forums.phpfreaks.com/topic/131675-solved-turning-off-register_globals/#findComment-683916 Share on other sites More sharing options...
soycharliente Posted November 6, 2008 Author Share Posted November 6, 2008 I don't see an .htaccess file in the MediaWiki directory or anywhere else outside that folder. Should I ask my host if I can just create one? Would that have an affect on anything? It would only contain 1 rule I guess. Quote Link to comment https://forums.phpfreaks.com/topic/131675-solved-turning-off-register_globals/#findComment-683925 Share on other sites More sharing options...
DeanWhitehouse Posted November 6, 2008 Share Posted November 6, 2008 My post should fix it, create a php.ini file. Quote Link to comment https://forums.phpfreaks.com/topic/131675-solved-turning-off-register_globals/#findComment-683934 Share on other sites More sharing options...
soycharliente Posted November 6, 2008 Author Share Posted November 6, 2008 My hosting company put a php.ini file on the server. They said it was always there, but it wasn't. I don't really understand why they would do that, but whatever. It's there now and it's fixed. Thanks. Quote Link to comment https://forums.phpfreaks.com/topic/131675-solved-turning-off-register_globals/#findComment-683968 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.