I didn't know that. Thanks for the info. I think it would be best that I not use php.ini.
I can write the script to register the variable. What would be a demo script that would work? I'm having a little trouble understanding that on the php.net website. Most of the script that use global variables came from hyperlinks. I have no form method like "post" or "get". I have one website that use session. Like session_start(), session_register(), etc. How would this be affected and what is the work around to this one. Thanks, Scott "Jay Blanchard" <[EMAIL PROTECTED]> wrote in message 002901c21d3e$0bba45d0$8102a8c0@niigziuo4ohhdt">news:002901c21d3e$0bba45d0$8102a8c0@niigziuo4ohhdt... > [snip] > I'm using UNIX, not windows, so there is no php.ini in UNIX. > [/snip] > > Look here /etc/apache/php.ini-dist or /etc/apache/php.ini. There is an ini > file for PHP, and you may have to rename php.ini-dist to php.ini. Once done, > look for > > ; You should do your best to write your scripts so that they do not require > ; register_globals to be on; Using form variables as globals can easily > lead > ; to possible security problems, if the code is not very well thought of. > register_globals = Off > > Setting Off to On will let your scripts continue to work, once you have > restarted your server of course. You really should, due to security > considerations leave this set of Off and reconfigure your variables as > stated in other e-mails. Since this will probably take some time you can > leave register_globals on until you're finished with that project. > > HTH! > > Jay > > -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
