FATAL ERROR: register_globals is disabled in php.ini etc..

[TracyG]

I just use a .htaccess file with this in it:

php_flag register_globals on

Tracy Gibson

[jpf]

Originally Posted by TracyG

I just use a .htaccess file with this in it:

php_flag register_globals on

Tracy Gibson

That ONLY works if the HOST has register_globals=on in there main php.ini - but turned off as a default (in https.conf) in all virual domains - and allow change (via htaccess).

It does not ALWAYS work as some hosts DON'T allow this ON without there permission.

[Arpit]

turning register_globals on is a BAD BAD BAD and I should say it once again BAD move,

lemme quote php.net and my sysadmins words

Perhaps the most controversial change in PHP is when the default value for the PHP directive register_globals went from ON to OFF in PHP 4.2.0. Reliance on this directive was quite common and many people didn't even know it existed and assumed it's just how PHP works. This page will explain how one can write insecure code with this directive but keep in mind that the directive itself isn't insecure but rather it's the misuse of it.

When on, register_globals will inject (poison) your scripts will all sorts of variables, like request variables from HTML forms. This coupled with the fact that PHP doesn't require variable initialization means writing insecure code is that much easier. It was a difficult decision, but the PHP community decided to disable this directive by default. When on, people use variables yet really don't know for sure where they come from and can only assume. Internal variables that are defined in the script itself get mixed up with request data sent by users and disabling register_globals changes this.

[obscure]

OK - so if turning this to on is a bad move - how do get around the fact that you get the error:

FATAL ERROR: register_globals is disabled in php.ini, please enable it!

Is there another way around it?

Its really odd as I am installing on the exact same server as I did an install on 3 weeks ago, but before no prompt to turn it on - the install worked beautifully. but today - it wants it turned on...

Only difference is that I am installing a modified version of oscommerce with the gift voucher / discount contribution already inplace this time round. Though I have seen the prompt on one of the first installs I did on the server months ago...

Trying to get my head around all this - wish I had time to research it all fully!!

Confused! Any ideas?
Sadie

[eureka]

hy please helpe,register_globals =of (sory for my english)
1- i can't modify php.in
2- forget .htaccess don't work
it's a modification like oscommerce ? somwhere?
heeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeelp

[wolfshaven]

Im having the same problem where if I turn register_globals On an reboot the computer I still get the error that it is off when I run the install page for osc. Since it was asked earlier, no its not inside a commented line.

Im using windows xp and xampp with PHP Version 5.1.4.

Ive set up a virtual host catalog.myurl.com in which all other pages work so Im assuming that osc should too. When it didnt I tried installing it in c:\xampp\htdocs and again it did not work.

Im wondering if maybe the php comunity did something that ignores register_globals in version 5 because by all rights it should be working.

Its frustrating as hell trying to get this to work not to mention this is kind of a job interview for me. If I cant get it to work Im not going to get the job. /cry

[wolfshaven]

I found it!!!

I was trying to change the php.ini in C:\xampp\php but the one that you need to change is in C:\xampp\apache\bin

I was reading a post on apachefriends where a person was having problems with php and sendmail. The fix mentioned that you needed to edit the sendmail line in C:\xampp\apache\bin\php.ini

This fixed things for me and Im hoping it will work for others. Good luck!!!