register_globals

[designerdecor]

Hi

I have this Os commerce template I downloaded and when I try to install it it it requires me to have my

register_globals set to on, is this safe? would it be ok if I did have it on? not quite sure what to do, I also have a joomla site running on the same hosting package does anyone know if turning it on will effect my other store site? Thank you in advance for any help or direction with this

 

Kelly

[MrPhil]

Register global variables are considered a bad idea, because there are security exposures when using them. PHP, as of 6.0, won't even allow them. Many hosts already turn them off by default (you have to explicitly turn them on).

 

Other applications on your site, such as Joomla, if they don't make use of register global variables, shouldn't care whether you have them on or not.

 

Keep in mind that if you absolutely have to have register globals on for one application (in its own subdirectory), you can usually set it up with a php.ini of its own. Talk to your hosting service.

 

You can also look at fixing the template to not need register globals, by adding $varname = $_REQUEST['varname']; at the top of a file that uses register global $varname. Or, consider using a more up to date template that doesn't require register global variables.