Zen Cart Set Up - System Inspection

[j_tai]

So I'm attempting to install Zen Cart but have received 2 warnings. I'm at a loss as how to disable these 2 things. I've contacted my host for assistance but they won't even help me unless I pay them a fee.

Should I be concerned with these 2 warnings? Can I ignore them and proceed with installation?

WARNINGS:
(1) Register Globals = ON
(2) PHP session.use_trans_sid = ON

I guess both should be disabled. Can someone kindly assist me and tell me how to disable these 2 features? THANKS!

JT

[DrByte]

If you click on the "more info..." link next to each of the warnings, a help-text window will pop up with instructions.

The Register Globals option isn't critical, but having it off makes your site a touch more secure.

[j_tai]

Yes, I already clicked the text link next to the warnings but still am uncertain of how to proceed.

These are the instructions I receive when I click on the text link:
(1) Register Globals = ON
If you wish to disable it, and your hosting company won't turn it off for you, you might try adding this to an .htaccess file in the root of your shop:
php_flag session.use_trans_sid off
php_flag register_globals off
<Files ".ht*">
deny from all
</Files>

I don't see an .htaccess file in the root of my shop. Is it in the admin folder?

(2) PHP session.use_trans_sid = ON
You can disable that feature via a .htaccess file or directly from PHP code.
For a .htaccess file you should add the following line:
php_flag session.use_trans_sid off

Again, where do I access this .htaccess page?

HELP!!

[superprg]

You have to make .htaccess file in the location where your cart is

So if you have installed cart in folder/directory store, make a file .htaccess in store and have this as the content

.htaccess
--------------
RewriteRule ^content(.*) index.php
RewriteRule ^component/(.*) index.php

php_flag session.use_trans_sid off
php_flag register_globals off
<Files ".ht*">
deny from all
</Files>

------------

[DrByte]

Um ... don't use those "RewriteRule" lines unless your host has enabled mod_rewrite ... or else you'll end up with Error 500 messages and blank screens.

and if you include the <Files...> portion, you'll block all access to html files.

All you need is this:

php_flag session.use_trans_sid off
php_flag register_globals off

[211]

I'm having this same errror.

Can someone elaborate on this a little? How do I create a .htaccess file?

So here's the path to my zencart folder:
/public_html/zencart

I need to put the .htaccess file in root of the zencart folder? I'm using ConText as my text editor so going off the post from superprg I'll make a new file and copy this into it:

RewriteRule ^content(.*) index.php
RewriteRule ^component/(.*) index.php

php_flag session.use_trans_sid off
php_flag register_globals off
<Files ".ht*">
deny from all
</Files>

but I want to omit both RewriteRule lines??? Is that right?

Then when I save the file how do I save it and what do I name it just ".htaccess"? I have no idea what to do at this point.

Thanks for being patient, this is my first attempt at creating a site, ...ever!

[superprg]

thats right

name of the file is .htaccess

and you place it inside /public_html/zencart


php_flag session.use_trans_sid off
php_flag register_globals off
<Files ".ht*">
deny from all
</Files>

If you are not able to create that file by right click in windows, go to cmd(Start->Run->cmd and say edit .htaccess)
That will make the file and you can open it in notepad then and write
Alternatively, open notepad and save it as .htaccess

[211]

Done!
No more yellow exclamation warnings.