Please Consider turning off register globals if possible...

[mthw]

Good evening all, alsto in the site, this is displayed:

Please Consider turning off register globals if possible...

What should I do?

[mathman]

That's a setting that can be turned off in the php.ini file. Turning it off is recommended due to security issues that can arise from having it turned on. If you don't have any php programs that require it being on then turning it off would be a good idea for future compatibility - PHP 5.4 I think has removed that capability.

To turn it off, search for the string 'register_globals' in the php.ini file and change it from 'On' to 'Off'. After saving the file, restart the webserver so the change is recognized.

[mthw]

Originally Posted by mathman

That's a setting that can be turned off in the php.ini file. Turning it off is recommended due to security issues that can arise from having it turned on. If you don't have any php programs that require it being on then turning it off would be a good idea for future compatibility - PHP 5.4 I think has removed that capability.

To turn it off, search for the string 'register_globals' in the php.ini file and change it from 'On' to 'Off'. After saving the file, restart the webserver so the change is recognized.

Where can I find the php.ini file.

www. my domain. com / / ticket / and then ?

[mathman]

Depends on the system. The Linux systems I administer have it in /etc/php5/apache2 (system path, not web path). On a Windows server I'm not sure where it's located. If you're working with a hosting company, or you don't have 'root' type privileges you'll need to talk to the system administrator about it. Or check into whether or not it's one of the settings that can be adjusted using a .htacess file - been a while since I've done that so I'm not clear enough on the details to give you any information on how that's done.

[mthw]

Originally Posted by mathman

Depends on the system. The Linux systems I administer have it in /etc/php5/apache2 (system path, not web path). On a Windows server I'm not sure where it's located. If you're working with a hosting company, or you don't have 'root' type privileges you'll need to talk to the system administrator about it. Or check into whether or not it's one of the settings that can be adjusted using a .htacess file - been a while since I've done that so I'm not clear enough on the details to give you any information on how that's done.

I have linux.
I then enter the control panel linux database and act from there?

[ntozier]

Not sure if you have a hosted solution or are hosting your own webserver.
If you are hosting your own web server the location of the php.ini file is dependent on distribution of Linux you are using.

On my Debian server its located at: /etc/php5/apache2/php.ini

You can use the locate command to find it on your server.

locate php.ini

You will probably need to use SSH or telnet to log into the server to edit this file under Linux. If you have a hosted solution some web hosts allow you to upload your own custom php.ini into your directory tree to have to influence PHP's behavior. You will have to check with your webhost to determine this (or their web page). Some hosted solutions have built in file editors (CPanel has one) which will let you edit the file directly. Others would make you FTP the file to your server.

On my windows server its located at c:\php\php.ini.

If you are running your own Windows Webserver it the file cab be edited with notepad.

Anyway this is not an OSTicket thing, but a webserver configuration setting.

[mthw]

a cpanel I can put on or off the following options:

reg_off_magicquota_off Impostazioni avanzate per utenti esperti con:
register_globals = Off, magic_quotes_gpc = Off PHPinfo()

reg_off_buf_off Impostazioni avanzate per utenti esperti con:
register_globals = Off, output_buffering = Off PHPinfo()

reg_on_buf_off Impostazioni avanzate per utenti esperti con:
register_globals = On, output_buffering = Off PHPinfo()

reg_off_buf_on Impostazioni avanzate per utenti esperti con:
register_globals = Off, output_buffering = On

which of these should I disable?
I just have to check the entry and give the ok.

tell me ...

i have PHP: 5.2.17

[mathman]

Originally Posted by mthw

register_globals = Off, magic_quotes_gpc = Off PHPinfo()

I'd use that one. Hate to admit it but I'm not sure on whether or not to turn on/off output buffering - that's a setting I've never changed.

[mthw]

Originally Posted by mathman

I'd use that one. Hate to admit it but I'm not sure on whether or not to turn on/off output buffering - that's a setting I've never changed.

enabling works just as described above the line reporting the issue Please Consider turning off register globals if possible, and disappeared.

and all right now?