IntegraMOD

Your phpBB Version: 2.0.
phpBB Type: Integramod 141
MODs: No
Your knowledge: Beginner
Board URL: http://www.aaquacks.com/forum

PHP Version:
MySQL Version:


What was done before the problem appeared?



What was done to try to solve the problem?




De.scription and Message

Security Test
Checkpoint Version / Status Reference Status
PHP Version (Visit Website) 4.4.2 4.4.6 CAUTION
ÂÂÂ » PHP SAFE MODE OFF ON CAUTION
ÂÂÂ » PHP GLOBALS ON OFF CAUTION

I have these 3 cautions in this panel and was wondering if it's something I should be concerned about.
Would it cause problems with 1.4.1?

I would turn globals off and afe mode on. Just my 2 cents worth.. <img>

Ok

Next question would be how to change it?

Is this found in cPanel somewhere?

If you are on shared hosting then you're probably out of luck.

But if you are on a VPS you can do this by editing your php.ini file. Should be in your /usr/local/php4/lib/ folder, or possibly /user/local/lib/ . These folders are in the true root of your server, so you probably won't be finding these folders in your FTP.

But within the php.ini file you can just search for "register" and then stop when you find "register_globals" and just switch if from "on" to "off."

Zac

and how bout the safe mode Zac is that in the same area?

Yeah I believe safe mode is also in the php.ini file. If you have access to it then that's great, however it's not completely imperative that those settings be changed.

Mine isn't running in safe mode. I don't know (with the exception of being more secure) what advantages safe mode specifically gives you. I don't believe it does anything for efficiency of page generation times and such.

Zac

A little too beyond me LOL
Probably something I would have to request my host to look after, but if it isn't important and won't affect the performance of my site, I'll leave it alone.

^ Confirmed. I actually talked with my internet security/tech friend this morning about Register_Globals and he said that if PHPBB is written in a way that it doesn't have to be turned on then it really doesn't matter if it's on or off, unless you have other site's on your server that are a little sketchy in that area.

I don't know much about php safe_mode but mine has been on ever since I got my server. I did hear it does help with security but if you're on shared hosting then security is the job of your host anyway.

Zac

register globals should always be off. Any program that requires it be on, is poorly written and should be run with caution. phpbb and integramod do not require globals to be on. If set to on, you will be at risk to many of the server hacks that .script kiddies love to run for fun.

My host helped me with changes, I made the changes, saved file and uploaded it.
Still getting same cautions.

Also PHP version 4.4.2 - should it be upgraded, oor is it ok?

i dont think the messages are version related. 4.4.2 is stable 4.4.6 is a little more secure, but neither is such a risk as to make upgrading mandatory, so upgrade at your leisure

Ok thx - about changing the php.ini files for safe_mode and global.

My php.ini was in my /forum folder

I made the changes but still doesn't show in maitenance and test section. Is there anything I have to do to update the changes?

php.ini is not in your forum. at least not a working copy. It is server side and you would need to login as root to edit it. on a *nix server it is usually at /usr/local/lib not sure of the path in a windows box. Onces edited you should restart your server, or at least apache

Thx again...

My host did the changes.
They also suggestted to leave the php version alone.