'register_globals is disabled' - enabling a risk?

[criscokid]

I'm attempting to install osCommerce for the first time on a Windows 2003 server but get the following error message:

FATAL ERROR: register_globals is disabled in php.ini, please enable it!

 

On taking a look at my php.ini file I found the following lines:

; Note that register_globals is going to be depracated (i.e., turned off by

; default) in the next version of PHP, because it often leads to security bugs.

; Read http://php.net/manual/en/security.registerglobals.php for further

; information.

 

None of the other PHP applications running on my server require this variable to be on. Considering the 'security implication' what is likely to happen if I turn it on?

[♥Vger]

If you were on a Unix/Linux operating system I'd say to run with Register Globals 'on' - but as this is a Windows box I'd say leave them 'off'.

 

You can use the Register Globals Patch Files (link below my name).

 

Vger

[criscokid]

You can use the Register Globals Patch Files (link below my name).

 

Thanks for such a speedy reply - that seems to have done the trick :-)