Hi,
I am on a quest for a new good webhost and I am currently using a trail account at a host that seems pretty good, but has one problem. I cannot turn register_globals off. They don't allow php_flag/php_value in .htaccess for security reasons but in this case it's causing insecurity
It's not that I can't code secure enough code to deal with this, but I'm also running other (public) php applications, and I just want register_globals off, period. I have tried to convince the sysadmin to find a way to turn it off just for my account but I think they don't want to set up individual configs or something.
One final way I want to try to convince him is to allow the register_globals php_flag only in the general configuration, so that you can only use this flag and no others. That way, the only thing allowed is actually closing a security risk. B
But I can't find any info on this, is there a way to configure apache and/or PHP so that you allow only one type of php_flag?
Please help me, I've been looking for a host for ages and I'm really getting tired of this :-(
Thanks a million!
Karin
-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
