register_globals is enabled. Drupal requires this configuration directive to be disabled.

Question

hi,

I've just moved my drupal to a new server and I get the following warning:

register_globals is enabled. Drupal requires this configuration directive to be disabled. Your site may not be secure when register_globals is enabled. The PHP manual has instructions for how to change configuration settings. (Currently using PHP register globals Enabled ('1'))

Should I change the configuration of the php server or I can ignore it ? I probably don't have access to php settings.

thanks

Answer 1

Check with your host if they can help you out. If you don't have access to php.ini then you may not be able to. register_globals has been off for a good number of years now so that's surprising. If the host allows you .htaccess files you can add this to yours:

php_flag register_globals off