[horde] Horde 4.0 + Register_globals ON

[Baptiste Bauer]

-----Message d'origine-----
De : Reindl Harald [mailto:h.reindl at thelounge.net] 
Envoyé : jeudi 7 juillet 2011 11:29
À : horde at lists.horde.org
Objet : Re: [horde] Horde 4.0 + Register_globals ON



Am 07.07.2011 11:21, schrieb Vilius Šumskas:
> Hello,
> 
>> Hi,
>>
>> I have a Ubuntu server : Linux 2.6.24-19-server with PHP 5.2.4.
>>
>> Successfully, Horde 4.0 was installed.
>>
>> And I can access to the admin panel control, ONLY With  
>> "Register_globals = Off"  on my php.ini.
>>
>> But I must keep the value to "ON" to allow intranet work properly. 
>> (Many business applications, yes  I know .that  sucks a lot . but I 
>> 've no choice.. ).
>> I already try to create a ". Htaccess" in the root directory of 
>> Horde4, with the following parameters:
>> php_value register_globals 0 OR php_flag register_globals off.
>>
>> I should not, but I tried also to modify "core.php" and comment out 
>> the test value REGISTER_GLOBALS. But nothing works.
> 
> Try "php_admin_flag register_globals off"

php_admin_flags and core configuration has not to be placed in .htaccess php_flags MAY work but why use .htaccess for such things?

<VirtualHost *>
 DocumentRoot /your/doc/root/path
 ServerName your.host.name
 <Directory "/your/doc/root/path">
  php_admin_flag register_globals off
  php_admin_value open_basedir "/your/doc/root/path:/usr/share/pear:/usr/share/php:/tmp"
 </Directory>
</VirtualHost>

*********************************

I tryed on /etc/apache2/apache2.conf 

<Directory "/var/www/hordemoi">
php_admin_flag register_globals off
</Directory>


That's works ! 

I used a .htacess cause I read it on many forums :/

There is a better file to configure 
<Directory "/var/www/hordemoi">
php_admin_flag register_globals off
</Directory>

??