How to enable register_globals for a single website without putting an entire server security at risk?


How to enable register_globals for a single website without putting an entire server security at risk?


* Go to your control panel and then click on File manager.
* In your file manager, enter the public_html folder.
* In the public_html folder you will see a file called .htaccess.
* Select  the .htaccess  file and click on edit in the upper right hand corner.
* Copy and paste the text line shown below at the bottom of .htaccess file and then save it:
php_value register_globals 1
This will turn your register_globals on and your script will work properly. Why is register_globals
disabled in the first place? Leaving register_globals turned on poses a security risk for an entire web
server. It should therefore only be enable on a case by case situation and only per website.

Commentaires

Enregistrer un commentaire

Posts les plus consultés de ce blog

Hacking Into The Indian Education System Reveals Score Tampering

Image
Debarghya Das has a fascinating story on how he managed to bypass a silly web security layer to get access to the results of 150,000 ISCE (10th grade) and 65,000 ISC (12th grade) students in India. While lack of security and total ignorance to safeguard sensitive information is an interesting topic what is more fascinating about this episode is the analysis of the results that unearthed score tampering. The school boards changed the scores of the students to give them "grace" points to bump them up to the passing level. The boards also seem to have tampered some other scores but the motive for that tampering remains unclear (at least to me). I would encourage you to read the entire analysis and the comments , but a tl;dr version is: 32, 33 and 34 were visibly absent. This chain of 3 consecutive numbers is the longest chain of absent numbers. Coincidentally, 35 happens to be the pass mark. Here's a complete list of unattained marks - 36, 37, 39, 41, 43, 45, 47, 49, 51, 53,
Lire la suite

Information Service and Cloud Dedicated Hosting

Image
Dedicated hosting service, dedicated server, or managed hosting service is a type of internet hosting the client leases an entire server not shared with anyone. It is more flexible than shared hosting, and organizations have full control over the server (s), including choice of operating system, hardware, etc. There is also another level of dedicated or managed hosting managed hosting is called complex. Apply complex managed hosting on physical servers, hybrid server and virtual servers with many companies choose hybrid (a combination of physical and virtual) hosting solution. There are many similarities between the standard and complex managed hosting, but the main difference is the level of administrative support and engineering the customer pays for all because of the growing size and complexity of infrastructure deployment . Steps presented to support most of the administration, including security, memory, storage, and support of information technology. Proactive ser
Lire la suite

DHS EAGLE & First Source Digital Guide Launched

Image
The Enterprise Acquisition Gateway for Leading Edge Solutions (EAGLE) is a multiple-award indefinite delivery/indefinite quantity (IDIQ) contract vehicle, specifically designed as the preferred source of information technology (IT) services for the majority of the Department of Homeland Security (DHS) enterprise infrastructure and initiatives. According to Soraya Correa, Director of the DHS Office of Procurement Operations (OPO), the success of EAGLE has led to plans for EAGLE II. Designed as a companion contract to EAGLE, FirstSource provides DHS with access to contractor's commercial catalogs which offer a full array of IT commodity products available in the commercial marketplace from multiple original equipment manufacturers, producers, and suppliers. It is built on the same strategy as EAGLE and lets DHS components place their own orders through a centralized ordering vehicle, accessible to senior leadership, where they can find data or information related to their IT needs. S
Lire la suite