Register Globals and other PHP settings
To turn register globals off, you will need to change the settings in the php.ini file to:
register_globals = Off
Note the upper case letter O in Off.
This will prevent PHP from automatically turning any value in the URL into a variable. That's a good thing because it means that hackers cannot try to insert anything they want into your code simply by inserting it into your URL. Well written code should be validating the variables anyway, but this provides extra security in case the script does not validate variables properly or if the validation is buggy.
Other PHP Settings
The same steps apply to all other php settings available in the php.ini file (e.g. auto_append, allow_url_fopen).
Recommendations for Modifying php.ini
It is recommended that you modify the existing default php.ini file in your home directory, if one exists. If not, we can upload a pre-made php.ini file for you which you may change as needed.
Instead of having us create and setup the php.ini file for you, you can place your php.ini file in your Home Directory (
/home/username/) yourself and then add this code to your primary .htaccess (
Be sure to replace "username" with your actual cPanel user name.
<IfModule mod_suphp.c> suPHP_ConfigPath /home/username <Files php.ini> order allow,deny deny from all </Files> </IfModule>