register_globals per folder

BIGmog

Hey all,
I'm not too familiar with IIS. Is there a way I can set register_globals to off on an individual folder (site) basis?

Is there a Windows equivilant of .htaccess?

OS Name Microsoft Windows 2000 Server
Version 5.0.2195 Service Pack 3 Build 2195
IIS 5.00.0984

-dusty

jerdo

No .htaccess equivalent in IIS, cause it kind of sucks. And .htaccess wouldn't help with register globals since that is set in the php.ini and not the webservers configuration.

BIGmog

You can turn off register_globals in .htaccess

One can even set it per directory, in Apache's .htaccess file:

php_flag register_globals on

http://www.php.net/manual/en/security.registerglobals.php

You can even do it in httpd.conf

Sadly neither of these options help me in IIS. Any one else have an idea?

-dusty

jerdo

Make a script that does that and put it in each directory then include it. Otherwise switch to Apache as IIS is a buggy, security hole riddled piece of crap.

BIGmog

I agree. I wish it were under my control to use Apache. I'll try including a script.
-BIGmog