Zenphoto Forums

The simpler media website CMS

---

Would you like to register or log in (lost password?)?:

Username:
Password:

Remember me

zenphoto forums » Installation Support

1. jenwaak
   

   Apprentice
   Joined: Nov '11
   Posts: 4

   After having read the forum threads on this topic I'm not really crazy about even starting this thread, but I'm stuck.

   Register_globals is on at my host by default, so I created a php.ini and put it in the cgi-bin directory as instructed by my web host. I also created a phpinfo file, http://jwaak.com/phpinfo.php, to verify that register_globals was indeed set to off. According to that file, the local version is.

   I then took the advice from another thread and did an echo in the setup, and it returned: $register_globals string(3) "off"

   This would also tell me that register_globals is off.

   Yet, I still have a setup error stating:
   Error!

   PHP Register globals presents a security risk to any PHP application. See Using Register Globals. Zenphoto refuses to operate under these conditions. Change your PHP.ini settings to register_globals = off.

   What next?

   Thanks!

   Posted 1 year ago #

2. 
   acrylian
   

   Developer
   Joined: Jul '07
   Posts: 13,511

   Please see this older lengthly discussion:
   http://www.zenphoto.org/support/topic.php?id=9435#post-55544

   Don't forget to read the Forum rules and usage resources

   Posted 1 year ago #

3. jenwaak
   

   Apprentice
   Joined: Nov '11
   Posts: 4

   I had read that post, several times, and tried the troubleshooting advice provided by sbilliard prior to posting this question.

   So, my question is:
   1) If the results of my phpinfo.php script tells me that the local version of register_globals is off, and
   2) when I add this code to setup;php add a line to setup.php circa line 427 that reads:
   echo '
   $register_globals ';var_dump($register_globals);
   I also get the output of: $register_globals string(3) "off"

   What is the next step?

   You can run the phpinfo script yourself to verify, as I've provided the link above.

   Posted 1 year ago #

4. 
   acrylian
   

   Developer
   Joined: Jul '07
   Posts: 13,511

   Did you try what my collegue mentiones over there?:

   The setting of register_globals was made to the string "off" [note the quotation marks. This is not at all the same as setting it to the constant off. Instead it is equivalent to setting the variable to on or true,

   So set it to off [no quotes] and it will indeed be not set.

   Don't forget to read the Forum rules and usage resources

   Posted 1 year ago #

5. jenwaak
   

   Apprentice
   Joined: Nov '11
   Posts: 4

   Yes, my register globals line in my php.ini file reads: register_globals = off

   If the phpinfo script tells me that register_globals is off (which it does), shouldn't they indeed be off?

   -Jen

   Posted 1 year ago #

6. 
   sbillard
   

   Chief Developer
   Joined: May '07
   Posts: 9,820

   See the post above.

   Don't forget to read the Forum rules and usage resources

   Posted 1 year ago #

7. jenwaak
   

   Apprentice
   Joined: Nov '11
   Posts: 4

   I understood acryllian's instructions to read to not use quotes when setting it. Which is exactly what I replied. I now fear I misunderstood that block quote, so I have modified my php.ini to try it both ways.

   register_globals = off
   AND NOW
   register_globals = "off"

   (note both with and without the quotes)

   My phpinfo script as well as your setup script gives me the same information, either way. phpinfo tells me the local version of my variable is set to off, yet your setup script is telling me it is on. Is your setup script perhaps reading the Master Value (which I cannot change as I'm on shared hosting)?

   Copied directly from phpinfo:
   Directive Local Value Master Value
   register_globals Off On

   Posted 1 year ago #

8. 
   sbillard
   

   Chief Developer
   Joined: May '07
   Posts: 9,820

   register_globals Off On

   It can't be both! I presume since On was the last item that is what it is set to.

   Don't forget to read the Forum rules and usage resources

   Posted 1 year ago #

RSS feed for this topic

Reply

You must log in to post.