Register Globals and other PHP settings

Register Globals

To turn register globals off, you will need to change the settings in the php.ini file to:

register_globals = Off

Note the upper case letter O in Off.

This will prevent PHP from automatically turning any value in the URL into a variable. That's a good thing because it means that hackers cannot try to insert anything they want into your code simply by inserting it into your URL. Well written code should be validating the variables anyway, but this provides extra security in case the script does not validate variables properly or if the validation is buggy.

Other PHP Settings

Same steps apply to all other php settings. (e.g. magic_quotes, auto_append, allow_url_fopen)

Recommendations for Modifying php.ini

It is recommended that you modify the existing default php.ini file in your home directory, if one exists. If not, we can upload a pre-made php.ini file for you, and you may change it as you need.

If you need a php.ini file for your account, please contact us via phone or live chat. We are glad to create a complete file for you.

Instead of having us create and setup the php.ini file for you, you can place your php.ini file in your Home Directory (/home/username/) yourself and then add this code to your primary .htaccess (/home/username/public_html/.htaccess).

Be sure to replace "username" with your actual cPanel user name.

<IfModule mod_suphp.c>
suPHP_ConfigPath /home/username
<Files php.ini>
order allow,deny
deny from all
</Files>
</IfModule>

NOTE: HostGator cannot know why you want nor need to change this setting. You are changing this at the advice of your web designer or the developer of your script. HostGator can only show you where to make the change.