Tweet
In order to enable the php register_globals on windows server, you need to change one setting in the default php.ini file of the server. In general, php.ini is located at c:\php\php.ini, you just need to locate register_globals in the file and change the setting from off to on. Below mentioned is the snap shot of the file.
register_globals = On [Security, Performance]
; Global variables are no longer registered for input data (POST, GET, cookies,
; environment and other server variables). Instead of using $foo, you must use
; you can use $_REQUEST["foo"] (includes any variable that arrives through the
; request, namely, POST, GET and cookie variables), or use one of the specific
; $_GET["foo"], $_POST["foo"], $_COOKIE["foo"] or $_FILES["foo"], depending
; on where the input originates. Also, you can look at the
; import_request_variables() function.
; Note that register_globals is going to be depracated (i.e., turned off by
; default) in the next version of PHP, because it often leads to security bugs.
; Read PHP: Using Register Globals - Manual for further
; information.
Please note that enabling register_globals on the server may cause several vulnerabilities to the server. Hence, you should avoid using it. and you should build the website in such a way that it does not need register_globals on. Moreover, this feature has been removed in the PHP 6.
register_globals = On [Security, Performance]
; Global variables are no longer registered for input data (POST, GET, cookies,
; environment and other server variables). Instead of using $foo, you must use
; you can use $_REQUEST["foo"] (includes any variable that arrives through the
; request, namely, POST, GET and cookie variables), or use one of the specific
; $_GET["foo"], $_POST["foo"], $_COOKIE["foo"] or $_FILES["foo"], depending
; on where the input originates. Also, you can look at the
; import_request_variables() function.
; Note that register_globals is going to be depracated (i.e., turned off by
; default) in the next version of PHP, because it often leads to security bugs.
; Read PHP: Using Register Globals - Manual for further
; information.
Please note that enabling register_globals on the server may cause several vulnerabilities to the server. Hence, you should avoid using it. and you should build the website in such a way that it does not need register_globals on. Moreover, this feature has been removed in the PHP 6.
