[csf: v4.39] PHP Check - register_globals

This forum is only for reproducible bugs with csf and lfd (i.e. not iptables problems, lack of understanding how to use a feature, etc). Posts must be accompanied with full technical details of the problem and how it can be recreated. Any posts not adhering to this, or not considered bugs, will be moved to the General Discussion (csf) forum.
Post Reply
fmdeveloper
Junior Member
Posts: 3
Joined: 27 Jan 2009, 00:01

[csf: v4.39] PHP Check - register_globals

Post by fmdeveloper »

The Check php for register_globals for currently showing as a fail when I run the "Check Server Security" script.

I have confirmed it is off in the php.ini file, and with a call to phpinfo().

Bug somewhere in CSF? It had previously passed the test

cPanel 11.24.4-C33609 - WHM 11.24.2 - X 3.9
CENTOS 4.7 x86_64 on standard

PHP Version 5.2.8
Linux host.xxxxxx.com 2.6.9-67.0.20.ELsmp #1 SMP Thu Jun 26 08:14:55 EDT 2008 x86_64
register_globals Off Off
j2001m
Junior Member
Posts: 6
Joined: 25 Nov 2007, 18:48

Post by j2001m »

fmdeveloper wrote:The Check php for register_globals for currently showing as a fail when I run the "Check Server Security" script.

I have confirmed it is off in the php.ini file, and with a call to phpinfo().

Bug somewhere in CSF? It had previously passed the test

cPanel 11.24.4-C33609 - WHM 11.24.2 - X 3.9
CENTOS 4.7 x86_64 on standard

PHP Version 5.2.8
Linux host.xxxxxx.com 2.6.9-67.0.20.ELsmp #1 SMP Thu Jun 26 08:14:55 EDT 2008 x86_64
register_globals Off Off

is it turned off within the cpanel whm Tweak Settings of your server
(root)
fmdeveloper
Junior Member
Posts: 3
Joined: 27 Jan 2009, 00:01

Off in Tweak Settings as Well

Post by fmdeveloper »

cPanel PHP Register Globals (Off [unchecked] is recommended for security reasons) is unchecekd in WHM Tweak Settings.
chirpy
Moderator
Posts: 3537
Joined: 09 Dec 2006, 18:13

Post by chirpy »

It's a bug in php --info which I'm working on a workaround for in the next release.
fmdeveloper
Junior Member
Posts: 3
Joined: 27 Jan 2009, 00:01

Thanks

Post by fmdeveloper »

chirpy wrote:It's a bug in php --info which I'm working on a workaround for in the next release.
Thanks. Really appreciate this product!
Post Reply