Dedecms php. ini register_globals must is Off

You can directly go to include/common. inc. php.

----
// Disable session. auto_start
If (ini_get ('session. auto_start ')! = 0)
{
Exit ('php. ini session. auto_start must is 0! ');
}
----
Delete.

============================
After this is deleted, find it again...
There is another
If (ini_get ('register _ globals '))
{
Exit ('php. ini register_globals must is Off! ');
}
After deletion, it can be perfectly solved.

 

The parts to be deleted are:
1. Row 10-20
// Enable register_globals has many unsafe possibilities. Therefore, disable register_globals.
If (ini_get ('register _ globals '))
{
Exit ('php. ini register_globals must is Off! ');
}

// Disable session. auto_start
If (ini_get ('session. auto_start ')! = 0)
{
Exit ('php. ini session. auto_start must is 0! ');
}

2. Lines 72nd to 75
If (ini_get ('register _ globals '))
{
Exit ('php. ini register_globals must is Off! ');
}

The deletion of the above two locations can be perfectly solved!

Search for this item in php. ini of apche. You should change register_globals = on to register_globals = off to save and restart the server environment, such as restarting apche.

 

In the morning, the update mainly filters out register_globals and session. auto_start strictly.
If the server is an independent server, you can modify php. ini in the php configuration file and change register_globals = On to register_globals = Off.
Change session. auto_start = 1 to session. auto_start = 0, and restart Apache.
If you are a VM user, try to notify the space provider to modify the configuration, or try ini_set ('session. auto_start ', 0.
If this is not the case, use the final method to directly include/common. inc. php

----
// Disable session. auto_start
If (ini_get ('session. auto_start ')! = 0)
{
Exit ('php. ini session. auto_start must is 0! ');
}