register golbals option

[gamblingprestige73]

Hello, how can I turn on "register globals" option for my site? Most php scripts not working untill this option will be turned on. Thanks.

 

[descalzo]

You cannot. It is set server-wide for security reasons and cannot be individually enabled.

To be honest, any script that relies on it being set is questionable.

 

[Livewire]

Register_globals was changed way back in php4 to be defaulted to "off", depreciated in php5, and no longer exists in php6 as an option because it is a massive security risk.

And can you define what you mean by "most php scripts," since all the ones I've seen that don't work with register_globals off are outdated and full of other problems, while more recent scripts have all been coded to NOT use register globals?


Edit: Descalzo beat me to it, but I'm gunna leave the post - the first line in particular here details that it wasn't actually x10hosting who shut it off, but the php developers themselves. For them to change it from "on" to "off" by default, then depreciate the function, and then remove it completely, there must be something about that function they don't like

 

[gamblingprestige73]

Register_globals was changed way back in php4 to be defaulted to "off", depreciated in php5, and no longer exists in php6 as an option because it is a massive security risk.

And can you define what you mean by "most php scripts," since all the ones I've seen that don't work with register_globals off are outdated and full of other problems, while more recent scripts have all been coded to NOT use register globals?


Edit: Descalzo beat me to it, but I'm gunna leave the post - the first line in particular here details that it wasn't actually x10hosting who shut it off, but the php developers themselves. For them to change it from "on" to "off" by default, then depreciate the function, and then remove it completely, there must be something about that function they don't like

I mean most serious commercial scripts, like online gambling software or others, which uses authorization sessions as "Login" and "password". I have many scripts like online-shops with digital goods and online payment mode, MLM scripts, online lottery scripts and more, they won't work without turning this option ON. I have experience with hosting, which allowed to turn this option ON by putting .httaccess to required directories, and register_globals becomed ON only for this directories. But x10 hosting just says 500 error...

 

[Livewire]

Having it on is a major risk, which is why we don't allow it to be turned on. Logins and sessions are easily done with register_globals off, as proved by countless CMS systems and forum systems.

There's no way to get it turned on; we can't run the risk that a register_globals exploit can take down the entire server, which if the script is coded poorly enough, it could.

 

[gamblingprestige73]

we can't run the risk that a register_globals exploit can take down the entire server

I understand that, no one hosting service do not want ot risk. On other hosting register_globals turned on by selected directories only inside account which do not touches entire server. But I can't change the code inside entire script (and I don't know how, also I believe this is not possible) to make it run without register_globals.

 

[lemon-tree]

You cannot change these settings as making alterations to the PHP setup through the .htaccess file is disabled intentionally here for both security reasons and because of how the servers are run. The other hosting company was foolish to allow such access, as users could alter the server's execution to bypass restrictions put in place by the admins.
So basically, no matter how nicely you ask this function will not be turned on either just for you or for the server as a whole. You should really reevaluate your use of these scripts as requiring register_globals, as Livewire has stated twice, is a huge security issue. I suggest you look into alternative software rather than keep asking for something you're not going to get.

 

[descalzo]

Personally, I wouldn't touch a script that relied on it being on.

1. If written more than 5 years ago, it is probably out of date.
2. If written in the past couple of years, the guy either was lazy, did not know what he was doing, or wanted to leave a backdoor into his script so he can rip you off.

Most serious scripts today actually have code to negate the fact that register_globals might be set, ie to close the security holes.

 

[Livewire]

Null issue everyone.

Online gambling is expressly forbidden in Illinois, Indiana, Louisiana, and a few other states.

We are based out of Illinois. You have been permanently suspended for violating the illegal gambling laws in our home state, which is also a violation of State Legislation and constitutes a violation of our Terms of Service under Illegal Material.

 

[gamblingprestige73]

The script is newest (2010) - please go to masvet.com and view it. As I understand, register_globals is unavailable on other (non-free) hosting plans?

 

[Livewire]

Wouldn't matter, read my above post. We're in Illinois and online gambling for $ is explicitly forbidden - your scripts on your account permit the use of real money. You cannot be unsuspended.

If you wish to try paid hosting you can, but when you get suspended there for the same thing you don't get the $ back, so I wouldn't risk it. You need to actually find a host -not- in a state where it's explicitly forbidden.

 

[lemon-tree]

The only place you could get it turned on is if you had a VPS, however your lack of willingness to enforce even the most basic security suggests that attempting to run and secure a complete server is not going to be a trivial task. Again, I suggest you look at using a different script and a different host, as hosting the gambling on one of the x10 VPS would likely still be a violation.

 

[gamblingprestige73]

This is not a gambling for real money (FUN-chips or title marks). But, also your service is useless because don't allows register_globals feature.

 

[lemon-tree]

I think you're confusing exactly what is useless here; it is your script that is useless, not the hosting. What you are essentially asking for us to do is deliberately weaken the security of our servers so that you could run an insecure and banned script. Anyone with even the slightest sense of security would realise that doing so would be a particularly bad idea.

 

[Livewire]

<li>To start playing on FUN or real
money, you need just create your personal account in our casino by pressing <a href="reg.php">REGISTRATION</a>
link.

^ Real money. Straight from your own source code.

This issue is closed since your script is insecure and in violation of state legislation. Continued discussion is not recommended in this case since we can keep going back and forth on register_globals, but it all comes down to that you are permanently suspended for hosting a real money gambling script.