By Julien PHAM on

Hi,

Is there a way to run a drupal website without the ini_set php function? ini_set is considered as a security leak by my firewall, and so I would like to remove ini_set in my php configuration file.

But if I do that, my website does not work anymore.

So any way?

I have tried changing the settings.php file by commenting the ini_set lines, but then I still have errors in bootstrap.inc.

Thanks

⋅ Categories: Drupal 6.x

Comments

axgalloway’s picture

axgalloway commented

I just installed Drupal 6.10 and had the same problem. What I did was put @ in front of all the offending lines in settings.php (lines 137-147), and in bootstrap.inc, I commented out the line // ini_set('session.cookie_domain', $cookie_domain); that is in an if statement on line 390.

It seems to be working now.