Jump to content


Welcome to the forum:

Welcome to the iThemes, PluginBuddy and WebDesign.com forum. We've created several tutorial video's to help you get you started with using the forum, please check them out!

Also take note of the forum guidelines.


Support hours:

Our moderators actively respond to forum support requests during normal business hours which are Monday-Friday, 8am - 5pm Central Standard Time, typically within one business day. Although some moderators choose to work during the weekends, we can not guarantee immediate attention to your requests. Thanks for understanding.

What is included with support:

Premium support includes theme/plugin issues such as: bugs encountered under normal operation, how to use basic features, basic WordPress help, and basic help with customization (meaning we point you to resources and will help in more depth as time allows). More information.

information

Server Buddy

PHP Register Globals

This topic has been archived. This means that you cannot reply to this topic.
3 replies to this topic

#1 Guest_GR8FL_*

Guest_GR8FL_*
  • Guests

Posted 15 December 2011 - 06:20 PM

Considering purchasing backup buddy, but need to know what this means from the Server Buddy analysis:

PHP Register Globals FAILED with suggestion to DISABLE.

How is this done and what does that mean to disable? Am running under WordPress 3.3

#2 Jeremy Trask

Jeremy Trask

    Moderator

  • Moderators
  • Others: All Plugins, Builder, Members, Toolkit
  • 13,879 posts

Posted 16 December 2011 - 07:44 AM

Hi

In the words of the PHP developers: "This feature has been DEPRECATED as of PHP 5.3.0. Relying on this feature is highly discouraged." It relates to the automatic creation of variables which, in conjunction with improperly written code, could cause security issues. Generally speaking these days there should be no code that depends on having this feature enabled and if you did have such code on your site it would be recommended to update or replace such code. If you have an up to date installation it is very unlikely that this will be the case so it is advised to disable it, which is the default value anyway. The reason that it is often enabled is because hosts don't want to "break" software that may be installed in a hosting account so they enable it by default.

So the warning that ServerBuddy gives is based on the current recommendation for the setting of this value.

This would normally be disabled by a setting in a php.ini file or similar but the best thing to do is to consult your host support who will be able to advise you more specifically on how to disable this on their servers, thanks.

Regards...jeremy

"Everything will be all right in the end. If it isn't all right yet then it isn't the end."


#3 bethannon

bethannon

    Advanced Member

  • Members
  • Others: Toolkit
  • PipPipPip
  • 495 posts

Posted 31 December 2011 - 06:51 PM

Hi Jeremy!  I'm having this same issue.  I have a support ticket in with the hosting company, but if they refuse to disable PHP Register Globals, can you point me to instructions for trying to disable it in a php.ini file?

#4 Jeremy Trask

Jeremy Trask

    Moderator

  • Moderators
  • Others: All Plugins, Builder, Members, Toolkit
  • 13,879 posts

Posted 31 December 2011 - 07:35 PM

Hi Bet

The config item you'd want in a php.ini would be:

register_globals = Off

or alternatively if you have to do this in a .htaccess file then

php_flag register_globals off

Depending on how you server is configured you may have to put this in multiple directories, e.g., some servers are configured for a "master" php.ini whilst others are per-directory so if you have scripts running from multiple places you might need to put the config in multiple places. Generally if this is the case (per-directory php.ini) for a WordPress installation I put a php.ini in the site root and also one in wp-admin and this generally seems to cover most bases.

Hopefully you host will give you the same advice (or at least similar but specific for their servers) - I can't think why they wouldn't allow or tell you how to do this for your site but if not it would be interesting to know why.

Hope that helps.

Regards...jeremy

"Everything will be all right in the end. If it isn't all right yet then it isn't the end."