SquirrelMail 1.4.6
PHP 4.4.1
UWIMAPD (IMAP4rev1 2003.339p-cpanel)
Apache 1.3.34
CentOS 4.2 i686
Our webserver runs as nobody.

Hello all. I'm installing 1.4.6, though I have been using 1.4.4 for a
while now on the same server.

I ran SquirrelMail configtest on the new 1.4.6 installation, and it
stopped at this error:
 ERROR: You have enabled php register_globals. Running PHP installation
with register_globals=on can cause problems. See security information
about register_globals.

I've read the link and also several posts on various lists, but I'm not
much wiser. Can someone please summarize:
 - what is the problem and is it serious?
 - can the problem be easily solved without breaking something else?
 - I'm on shared hosting (it's not my server) so can I solve this?
 - Is there any way to let the configtest bypass the register_globals
error so that it will run the remaining tests?

Because I'm on a shared server I override some PHP values locally in an
.htaccess file, such as to enable attachments greater than 2 MB. So, I
added the following to the .htaccess file in the new 1.4.6 directory:
 php_value register_globals Off

I then ran phpinfo.php, and it showed that while the Master Value is still
"On", the Local Value for register_globals is now "Off". Yet when I re-run
SquirrelMail configtest it still says that register_globals=on even though
it has been overridden locally.

Help please, this is beyond my knowledge. Thanks.







-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
--
squirrelmail-users mailing list
Posting Guidelines: 
http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-users@lists.sourceforge.net
List Archives: 
http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to