Turning register_globals on for a particular folder

**kuldeepkaundal** · Feb 24, 2009 01:11

Hi,

In my application, i need register_globals to be turned on for a particluar folder, i tried to achieve this by putting a file named as .htaccess inside that folder having following code:

php_value register_globals on

I also tried placing php.ini file here, but didn't work as well.

Is there a way to achieve this?
Plz suggest!

Thanks,
kul.

**logic_earth** · Feb 24, 2009 01:34

Why do you need register_globals for this one folder?

**kuldeepkaundal** · Feb 24, 2009 01:38

well, i need global session varaibles so, i need that setting to be turned on!

**logic_earth** · Feb 24, 2009 01:41

$_SESSION is not global enough? Register_globals is not the solution you seek.

**Raju Gautam** · Feb 24, 2009 01:42

Originally Posted by kuldeepkaundal

well, i need global session varaibles so, i need that setting to be turned on!

$_SESSION array is always available for you so why you need register globals turned ON for this?
page 1

PHP Code:


session_start();

$_SESSION['mysessvar'] = 'somevalue';

page 2

PHP Code:


session_start();

echo $_SESSION['mysessvar'];

**kuldeepkaundal** · Feb 24, 2009 01:48

yep, i know, but, its an old fashioned script, that i need to integrate, and it is using "session_register", and its the requirement of that script to turn on register_globals, if i change the settings in php.ini it works fine, so, thats why i need register_globals to be turned on!

**kuldeepkaundal** · Feb 24, 2009 03:34

In fact, i am not able to change any of the php.ini settings for that particular folder or application, suppose i need to change some setting for a particluar application, then, is there a way to do this?

currently, i've tried to put in a file "php.ini" with my settings, but, if i am checking those settings by creating a file phpinfo.php and executing that file, i still see default php.ini settings.

plz suggest a solution,
Thanks,
kul.

**Raju Gautam** · Feb 24, 2009 03:44

Do you want to run the old PHP script code in a new PHP version (server) or you want to run/write some code that can run in the old PHP version?

**kuldeepkaundal** · Feb 24, 2009 03:51

yes, i want that code to run on my new server, but, now, since, i've never tried this before, i wonder can we change the php.ini settings using php,incase we don't have access to php.ini file on that server?

Something like using .htaccess file or php.ini file?

**decowski** · Feb 24, 2009 04:23

If you really need session variables in global namespace then have a look at extract() function.

Or if you really need register_globals on for a directory then use .htaccess:

Code:

php_flag register_globals on

Although using a script that requires register_globals to be on is not a good idea. If it uses this flawed technology then it may be faulty in many other ways.

**felgall** · Feb 24, 2009 15:00

Just remember that PHP6 doesn't even have the ability to turn register_globals on since it was deprecated in PHP 4.2 and made completely obsolete in PHP 5. You only need to add about three lines of code to the top of a script to copy all the $_REQUEST values to their equivalent variable names so as to give the equivalent of turning on register_globals anyway without actually doing so.

**kuldeepkaundal** · Feb 25, 2009 06:56

Decowski:

Or if you really need register_globals on for a directory then use .htaccess:

Code:

php_flag register_globals on

yep, i tried this earlier, but, it didn't work!

And Felgall, you are right, i agree, but, the issue for me is that, i'll have to do that change in lots of pages then!

**decowski** · Feb 25, 2009 06:58

Originally Posted by kuldeepkaundal

Code:

php_flag register_globals on

yep, i tried this earlier, but, it didn't work!

No, you tried php_value. For boolean (on/off) settings you need to use php_flag.

**kuldeepkaundal** · Feb 25, 2009 07:02

ya, i had replaced php_value with php_flag, but, somehow its not working

**decowski** · Feb 25, 2009 07:06

Have you tried:

PHP Code:


echo ini_get('register_globals');

It has to work with php_flag. Does it give you any errors?

**kuldeepkaundal** · Feb 25, 2009 07:15

it doesnot echo anything, what i did is, i placed that php_flag code in .htaccess file inside that folder, and tried to use

PHP Code:


 echo ini_get('register_globals');

on index page in that folder, but, it didn't echo anything at all!

**decowski** · Feb 25, 2009 07:18

Originally Posted by kuldeepkaundal

it doesnot echo anything, what i did is, i placed that php_flag code in .htaccess file inside that folder, and tried to use

PHP Code:


 echo ini_get('register_globals');

on index page in that folder, but, it didn't echo anything at all!

So it means it returns false which you can confirm by running:

PHP Code:


 echo ini_get('register_globals') ? 'On' : 'Off';

I’m going for a ciggy, will try to work it out in a minute

**kuldeepkaundal** · Feb 25, 2009 07:23

yeah, its printing off there, means register_globals are still off, that code in .htaccess have no effect at all!

**decowski** · Feb 25, 2009 07:32

Try:

Code:

php_value register_globals 1

or

Code:

php_flag register_globals 1

**Kailash Badu** · Feb 25, 2009 09:31

Fiddle with a few other settings in .htaccess . If the changes still fail to show up within PHP, it's likely that .htaccess is disabled. In order to enable .htaccess, you must set AllowOverride directive inside httpd.conf to all.

**felgall** · Feb 25, 2009 14:24

It is possible that your hosting provider doesn't allow you to turn it on - it does lower the security of their server if you do so.

**printf** · Feb 25, 2009 19:55

Shouldn't it be...

PHP Code:


php_admin_flag register_globals on

php_admin_flag register_long_arrays on

**decowski** · Feb 26, 2009 02:48

Originally Posted by printf

Shouldn't it be...

PHP Code:


php_admin_flag register_globals on
php_admin_flag register_long_arrays on

No. php_admin_flag cannot go in .htaccess, only httpd.conf (or any Apache configuration file to be specific). It’s used specifically so that a setting cannot be modified from .htaccess. But you gave me a great hint! If in httpd.conf register_globals is set with:

Code:

php_admin_flag register_globals off

rather than:

Code:

php_flag register_globals off

Then you can’t change it from .htaccess. This may be the reason why it’s not working. Do you have access to Apache configuration?

**kuldeepkaundal** · Feb 26, 2009 03:21

I am trying to test it at my local machine now,rather than at server and for this i've set register_globals off in php.ini file here.

Just incase i want to check it at my local machine, can i do it by checking apache->httpd.conf file at my machine?

**felgall** · Feb 26, 2009 04:00

Why not just fix the script so that it doesn't require register globals in order to run. After all that option was turned off by default and deprecated in PHP 4.2 and declared completely obsolete in PHP 5 and has already been completely removed from PHP 6. So for any scripts written after about 2005 that setting should be assumed to be no longer available and the coding should be done properly.

See http://www.felgall.com/htmlt59.htm for a short piece of code that can be added to a web page that has the same effect gor GET and POST variables as turning on register globals would have. The other global arrays can be dealt with similarly if you need to.

User Tag List

Thread: Turning register_globals on for a particular folder

Thread Tools

Display

Turning register_globals on for a particular folder

Bookmarks

Bookmarks

Posting Permissions