web server on windows, with register_globals on, how to turn it off just on my site?

blackhorse

web server is on windows, with register_globals on, how to turn it off just on my site?

I cannot access the configuration file, and I cannot use .htaccess because it is on windows.

How to turn off the register_gobals in this case?

If no set up solutions, any code solutions?

Thanks!

thorpe

If its an IIS server your out of luck. This code might help with stray variables getting in your global space though.

if (@ini_get('register_globals')) {
    foreach ($_REQUEST as $name => $value) {
        unset($$name);
    }
}

MarkR

blackhorse wrote:
web server is on windows, with register_globals on, how to turn it off just on my site?

I cannot access the configuration file, and I cannot use .htaccess because it is on windows.

You are wrong. htaccess is for Apache, and it is of no relevance whether you're on Windows or something else.

How to turn off the register_gobals in this case?

If you are unable to turn it off in .htaccess, contact your admin and get them to turn it off for you.

It is unacceptable to have register_globals on these days - I recommend you make sure your app crashes out immediately if it's on (in case it gets turned back on).

If no set up solutions, any code solutions?

if (ini_get('register_globals')) {
  user_error("Turn register globals off", E_USER_ERROR); exit;
}

Mark