Register Globals
To turn register globals off, you will need to change the settings in the php.ini file to:
register_globals = OffNote the upper case letter O in Off.
This will prevent PHP from automatically turning any value in the URL into a variable. That's a good thing because it means that hackers cannot try to insert anything they want into your code simply by inserting it into your URL. Well written code should be validating the variables anyway, but this provides extra security in case the script does not validate variables properly or if the validation is buggy.
Other PHP Settings
Same steps apply to all other php settings. (e.g. magic_quotes, auto_append, allow_url_fopen)
Recommendations for Modifying php.ini
It is recommended that you modify the existing default php.ini file in your home directory, if one exists. If not, we can upload a pre-made php.ini file for you, and you may change it as you need.
/home/username/) yourself and then add this code to your primary .htaccess (/home/username/public_html/.htaccess).Be sure to replace "username" with your actual cPanel user name.
<IfModule mod_suphp.c>
suPHP_ConfigPath /home/username
<Files php.ini>
order allow,deny
deny from all
</Files>
</IfModule>
