Forcing register_globals to be on in PHP

Please note from the outset: this is not recommended! The suggested way to proceed is to correct the potential security vulnerabilities in your PHP scripts. However, we realise this can take time and in the short term you can use the following information to override PHP's defaults for your site.

To change the register_globals setting, you just need to add the following line to your .htaccess file. Note that if you do not already have a .htaccess file for your site or directory, you can just create an ordinary file called ".htaccess" - yes, the dot at the start is required - and place the following contents in it:

php_value "register_globals" "1"

For more detailed information see the PHP manual register_globals page.

Last updated 07 Apr 2005

Do you have any suggestions or comments on this page?