Forums / Installing on a Linux/Unix Server / htaccess and Register globals/session SID settings

htaccess and Register globals/session SID settings

Locked

Views: 2,438

Results 1 to 3 of 3
This thread is locked. New replies are disabled.
12 Jul 2007, 6:53 PM
#1
barryv4 avatar

barryv4

New Zenner

Join Date:
Jul 2007
Location:
UK
Posts:
4
Plugin Contributions:
0

htaccess and Register globals/session SID settings

In my prequisites install page I got this info and warning

'Zen Cart™ can work with the "Register Globals" setting on or off. However, having it "off" leaves your system somewhat more secure.

If you wish to disable it, and your hosting company won't turn it off for you, you might try adding this to an .htaccess file in the root of your shop (you may have to create the file if you don't already have one):
php_value session.use_trans_sid off
php_value register_globals off
#php_value register_globals off
<Files ".ht*">
deny from all
</Files>
or talk to your hosting company for assistance.'
I've created a ticket (server techs), which has not been dealt with yet but I'm going to assume that they will not want to turn on Register Globals.
So I create an htaccess file in my shop root.
Should it have a password?
SHOULD IT BE DONE BEFORE INSTALLATION or does it not matter?
Anybody know what are the guidlines for creating the htaccess apart from what is stated above?

12 Jul 2007, 8:09 PM
#2
kobra avatar

kobra

Black Belt

Join Date:
Aug 2005
Location:
Arizona
Posts:
31,500
Plugin Contributions:
4

Re: htaccess and Register globals/session SID settings

I've created a ticket (server techs), which has not been dealt with yet but I'm going to assume that they will not want to turn on Register Globals.
If thesed are "off" then you do not require setting this in the .htaccess??

this file is relatively secure as is and you can install first and edit the file later

Zen-Venom Get Bitten

13 Jul 2007, 8:27 AM
#3
barryv4 avatar

barryv4

New Zenner

Join Date:
Jul 2007
Location:
UK
Posts:
4
Plugin Contributions:
0

Re: htaccess and Register globals/session SID settings

Oh ...I just realized that the message says it was on and it would be better off. So that's what I was trying to accomplish.

My server techs said I should create an htaccess files with the following

php_value register_globals 0
php_value session.use_trans_sid 0
php_value output_buffering 4096