Search Our Database

How to Enable `register_globals` for PHP 5.2 and below

Last updated on |
under |
by

Important Note: The register_globals feature has been deprecated in PHP 5.3 and completely removed in PHP 5.4 due to security risks. It is strongly recommended to upgrade to newer PHP versions and avoid enabling this feature.

Introduction

This guide explains how to enable register_globals for PHP 5.2 and earlier versions. The register_globals directive allows PHP to automatically assign variables from external sources (such as forms, URLs, and cookies) to global scope variables. While this feature may be necessary for some legacy applications, it poses significant security risks, and its use is generally discouraged.

Configurations steps

1. The configuration file `php.ini` controls PHP settings. The location of this file depends on your Linux distribution and PHP setup. You can locate it with the following command:

php --ini

 

 

2. Open the `php.ini` file for editing. You can use nano, vim, or any text editor of your choice. For example:

sudo vi /etc/php.ini

 

3. Search for the `register_globals` setting in the `php.ini` file. You can search in vi by pressing /register_globals in normal mode and hit enter

 

4. Once you’ve found the directive, change its value to On:

register_globals = On

 

Conclusion

Enabling register_globals should only be done when absolutely necessary, as it introduces security risks to your server and applications. After enabling this feature, it is strongly recommended to update your code to be compatible with modern PHP practices and disable register_globals as soon as possible. For additional assistance or if you encounter any issues, please contact our support team at support@ipserverone.com.

 

Article posted on 26 March 2020 by IPSERVERONE