Hi,
my hosting provider does not allow to disable the register globals php setting.
So, in order to install drupal, I had to patch system.install, downgrading the register globals check to WARNING from REQUIRED.
As that is common to several providers, imho an appropriate flag should be inserted in the drupal settings file and documented.

--
Salvatore Montefusco
http://www.brightpebbles.org
- alternative OS experience

Comments

mr.baileys’s picture

mr.baileys
Primary language Dutch
Location 🇧🇪 (Ghent)
commented
Category: bug » support
Status: Active » Closed (works as designed)

This is not a bug. Drupal specifically mentions this as requirement:

PHP needs the following configuration directives for Drupal to work (only directives that differ from the default php.ini-dist / php.ini-recommended):
register_globals: off; this is the default value, but some hosts have it enabled

Have you read Register globals should be disabled? It contains information on how to resolve this issue.

If you still feel this should be changed, please open a feature request, although given the security implications I don't think it will have much chance of making it...