• Does register_globals functionality have to be turned on for WP to work? My webhost says it does but I doubt WP would write a script and be this popular with such a security hole.

Viewing 12 replies - 1 through 12 (of 12 total)
  • I’m a WP noob, but the following post that says that register_globals should be OFF for WordPress, not on.

    http://wordpress.org/support/topic/41685

    UPDATE: I’ve read several other old posts on the subject, and apparently there was a WP security exploit in August, 2005, that could only do damage if register_globals was set to ON. Almost immediately, a new version of WP was released to fix the problem, and ever since then, it has been recommended that register_globals be set to OFF, not just for WP, but because register_globals causes security issues for a lot of scripts if it is set to on.

    WP experts, did I summarize all of that correctly?

    Thread Starter kensavage

    (@kensavage)

    any idea what this would mean?

    http://kensavage.com/wp-admin/

    my webhost upgraded php from 4.1 to 4.6 and now all my php scripts just show the source and not render properly. I was told to make it work to turn on register_globals.

    Thought that was a basic no no with php?

    Tell them if you can see all the PHP code instead of being parsed – they screwed up something during the upgrade.

    Thread Starter kensavage

    (@kensavage)

    its a vps account and they say it’s my responsibility to configure it correctly. Although their the one that wrote the upgrade script for apache and php.

    Thread Starter kensavage

    (@kensavage)

    They’re telling me to turn on register_globals or fix the script’s code to complay with php 4.3 as far as variables being passed with GET and POST.

    “The PHP issues you are experiencing are due to code. PHP is working on the server.”

    Although all I did was upgrade php and did nothing to the files.

    Here’s what i did and the update….

    I asked my webhost to upgrade apache to 2.x and php 4.3.x
    After it was complete my wordpress website stopped working. I get this http://www.kensavage.com/ and http://www.kensavage.com/wp-admin/ but php works ok http://www.kensavage.com/info.php

    I even uploaded fresh files to one of the sites and nothing. I had a friend of mine who’s a unix sys admin look at the server side of things and he says everythig should work ok. It’s just wordpress not working for this upgrade.

    Is there anything I can test or any suggestions?

    Update: while doing a fresh install on a new domain and database I get to this point in the install and it just stops.

    Second Step

    Now we’re going to create the database tables and fill them with some default data….

    Thread Starter kensavage

    (@kensavage)

    php files have proper permissions to be read and index.php is listed as a starting file for default fodler files in httpd.conf.

    I GIVE UP. almost.

    YOu can toggle register_globals on and off by using .htaccess file in your root folder
    ON
    php_flag register_globals on

    OFF
    php_flag register_globals off

    Thread Starter kensavage

    (@kensavage)

    I tried that and they shouldn’t be on for anything but when I did turn them on it didn’t make a difference.

    php files render ok but it seems like WP php files dont want to execute.
    http://kensavage.com/info.php works ok but not http://kensavage.com/wp-admin

    Have you checked the error_log and the permissions on the php files that won’t run?

    Thread Starter kensavage

    (@kensavage)

    yes I have and they aren’t telling me anything unusual or problematic.
    Permissions are set to what all other php files are. It’s just that the wp- files are not rendering.

    I’m going to try a different webhost.

Viewing 12 replies - 1 through 12 (of 12 total)
  • The topic ‘Is this webhost wrong re:wordpress?’ is closed to new replies.