Overriding the host PHP settings?

conjurer

I have discovered that my hosting company has left the Register_gloabals set to on.

They say if I am worried about the security issues with my scripts that I can override the PHP settings. But they didn't offer any info on how to do this.

They said something about doing it in an .htaccess file.

Is there a way to do this and can someone explain how?

Thanks!

Simon_Hartley

Open up a simple text editor such as Notepad for Windows.

Paste in this line:

php_flag register_globals off

Save this file as "all files" giving it the extension .htaccess

Put the .htaccess file in the root directory

Use <?php phpinfo(); ?> to check that register_globals are off for your account.

conjurer

Thanks - that worked great!

Does php_flag work with other parameters too?

Simon_Hartley

hi yes it does for some.. off to bed now its 3.45am here. will post some info up when i get up if i remember! ---unless someones else wants to list them?