register_globals for osCommerce?

[hose30]

Hi,

I have got a problem with my osCommerce store at the moment.

I have been told on the osCommerce forum to check with my host that register_globals = on in the php.ini file?

As I do not really no what this means I have asked here, can I access my php.ini file to check this or does the host have to do this?

I have been told that the problem could be caused by register_globals = off which may have happened in a host update?

Please could someone advise me further, thank you!

 

[Livewire]

Edit: Just checked here: http://forums.oscommerce.com/index.php?showtopic=318750

A late post from october 2008 indicates the Release Candidate (RC) releases of osCommerce are register_globals off compatible - you may want to snag one of them off their website and give it a shot

And now back to the original post I had here:

Hi,

I have got a problem with my osCommerce store at the moment.

I have been told on the osCommerce forum to check with my host that register_globals = on in the php.ini file?

As I do not really no what this means I have asked here, can I access my php.ini file to check this or does the host have to do this?

I have been told that the problem could be caused by register_globals = off which may have happened in a host update?

Please could someone advise me further, thank you!

Register_Globals is indeed off - it is an INSANELY large security risk, and I'm still absolutely flabbergasted that any store script is requiring it to be enabled.

Per the following past topics, I don't think you'll have much of a shot of it getting enabled, but to do so you need to visit http://support.x10hosting.com and have one of the mods/admins get you a better answer - this is community support and we can't get it enabled.

Topics: http://forums.x10hosting.com/free-hosting/70872-php-problem.html
http://forums.x10hosting.com/free-hosting/74293-mysql-database.html (last post)
http://forums.x10hosting.com/free-hosting/57868-register_globals.html


Here's the real problem with why you would have a really hard time getting it enabled: Besides the insanely large security risk, it's a depreciated setting in PHP 5.3, which means it's planned to be erased entirely.

Coincidentally, PHP 6 doesn't have it -at all-. osCommerce will cease to function on php6 altogether unless they decide to recode anything that uses register_globals. Supposedly there's a v3 that's been in progress since March 2007 at least, but that's the last I've heard of it - no idea if that needs Register_Globals or not either, hopefully not.


Otherwise, if x10 can't enable register_globals (and I'm guessing they won't be able to given the security issues), you'll need to replace the store script with some other one (look for ones that are PHPV5 compatible - osCommerce 2.2 is phpV4 compatible, no listed compatibility right now for 5).

 

[markhere]

There is a php.ini file in Public_html/catalog/ext/modules/payment/paypal_ipn
Or something to that effect. This is the only php.ini that I know of in oscommerce.
Should show something about register globals

 

[Livewire]

There is a php.ini file in Public_html/catalog/ext/modules/payment/paypal_ipn
Or something to that effect. This is the only php.ini that I know of in oscommerce.
Should show something about register globals

What I'm not sure of though is whether x10 will actually let you use that php.ini - my guess is with x10's php versions (basic, intermediate, and advanced), php.ini won't work like it would on a normal server.

Hence why he'll wanna check with the support ticket system, especially given that in the past it's been noted that it won't be enabled and/or that it needs admin attention to try and get the answers he needs.