register_globals off

[swapnil_india20]

how do i turn off register_globals in php.
I have done it in php.ini but still not working.

Some one told me that i need to do it using
/home/httpd/vhosts/vhosts.conf

Can some one pls help me doing this.

-- swapnil

 

[phoenixisp]

Changing the php.ini file is the correct way. But be sure to restart Apache to implement the change.

 

[jamesyeeoc]

Turning it off in /etc/php.ini has a global effect. If you still have domain(s) where phpinfo() still shows globals turned on, then check those domain(s) vhost.conf and vhost_ssl.conf files to see if they have it turned on.

These files are kept in the domain's 'conf' directory:

/home/httpd/vhosts/domain.com/conf

It will look something like the following:

<Directory /home/httpd/vhosts/domain.com/httpdocs>
php_admin_flag engine on
php_admin_value register_globals 1
</Directory>

Where 1=on and 0=off

If you edit or create any vhost.conf or vhost_ssl.conf file, you must issue the command:

/usr/local/psa/admin/bin/websrvmng -u --vhost-name=domain.com

Then restart Apache service.