Help - Search - Members - Calendar
Full Version: Joomla! Security "register Global Emulation"
TotalChoice Hosting Family Forums > TotalChoice Hosting General Support > Security Discussions > Software/Scripts/Other Alerts
mooredd
Hello all,

In reading the security stuff about Joomla!, it says to turn off the emulation by editing the globals:

see: register globals emulation instructions


I just upgraded to the latest install: v.1.0.15
and have done both of the following:
1) edited the globals php file in the root to "0" and
2) confirmed that globals is turned off in the global config / server tab in the joomla! admin/back end.

And still, I get system info, security warnings, that tell me that globals is still turned on. I also just installed a new component, and it tells me that it won't work because globals is still turned on.

?

Is this something TCH can help with, or should I go post my issue w/ joomla! forums. I've searched both forums, and no one else has seemed to have this problem.

I truly thank anyone in advance for assistance.

- D.
Bob Crabb
Add the following line to the .htaccess file in the root directory:

CODE
php_flag register_globals off


Then, even though it is turned on in the server, it will be turned off on your site.
mooredd
thanks, Bob; I added the code but it didn't change the warning messages

other ideas?



QUOTE (Bob Crabb @ Mar 28 2008, 11:38 AM) *
Add the following line to the .htaccess file in the root directory:

CODE
php_flag register_globals off


Then, even though it is turned on in the server, it will be turned off on your site.

TCH-Bruce
If that didn't do it, open a ticket with the help desk and have them take a look at it for you.
TCH-Thomas
One thing to try if you have joomla installed in a sub directory...
I donīt have a joomla installation in a sub directory at the moment so I canīt check it, but I believe you can try adding this line in a htaccess file and place that in the same directory as you have joomla in.
mooredd
thanks for all the ideas;
before I submit a ticket, is there a best place to put this line of code in the htacess file?

I stuck it between the last two sections, not surrounded by "#s"

I have Joomla! installed in the root directory.

thanks again.

QUOTE (TCH-Thomas @ Mar 28 2008, 01:16 PM) *
One thing to try if you have joomla installed in a sub directory...
I donīt have a joomla installation in a sub directory at the moment so I canīt check it, but I believe you can try adding this line in a htaccess file and place that in the same directory as you have joomla in.

Bob Crabb
I would try putting it in a separate line, above everything else in your .htaccess file
mooredd
Thanks again; no luck mad.gif

I'm submitting a ticket and will let you know how it turns out.

- D.

QUOTE (Bob Crabb @ Mar 28 2008, 03:49 PM) *
I would try putting it in a separate line, above everything else in your .htaccess file

flashram
Have you tried restarting your apache server, for the effect to take affect. Just a thought.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.