register_globals is enabled

I get that with Drupal 6 on Hostgator - and Hostgator is a very good host in my opinion. I just turn it off - its easy to do yourself if you have access to php.ini - if your host has cPanel there is a Quick config for php.ini where you can just turn the button off - if not you can ask your host to turn it off in the php.ini file. I've no idea why it causes a security risk, but i dont think its just D7.

Are you new to Drupal or have you been using D6 on the same host?

hope this helps, Joe

Have you looked at this post: http://drupal.org/node/210311

There might be a way to get round it by adding a line to your htaccess. There are also some other solutions there.

Glad you got to the bottom of it.

i think given the popularity of Drupal, the diverseness of websites produced and the amount of people who will try to hack it they probably have good reason to want register globals off.

I mean, if someone discovers a flaw in the system just think how many thousands of websites they'd have access to, so I'm glad the Drupal coders do all they can when it comes to security. Doesnt matter if you're testing the dev version or running a huge website - the security has to be the same across the board.

NEVER HACK THE CORE. You might read that before. First make sure that you can provide your basic Drupal the necessary basic platform and than install it. Yes register globals is a security setting. You can set your apache with php.ini, control panel or ini_set(); (or another shell script).

Issue automatically closed.

I figured out the register_globals on drupal installation source, even when the installed modules and themes still like the old status
the way you tried to use this lightly

/ public_html / my_site / modules / system / system.install

find the line

if (! empty ($ register_globals) && strtolower ($ register_globals)! = 'off') {

and replaced with

/ / if (! empty ($ register_globals) && strtolower ($ register_globals)! = 'off') {
if (baitoan.com) {

you have no idea what

you can reslove this problem by following these few step:

path : /drupal_core/modules/system/system.install

comment some some
/*
if (!empty($register_globals) && strtolower($register_globals) != 'off') {
$requirements['php_register_globals']['description'] = $t('register_globals is enabled. Drupal requires this configuration directive to be disabled. Your site may not be secure when register_globals is enabled. The PHP manual has instructions for how to change configuration settings.');
$requirements['php_register_globals']['severity'] = REQUIREMENT_ERROR;
$requirements['php_register_globals']['value'] = $t("Enabled ('@value')", array('@value' => $register_globals));
}
else {
$requirements['php_register_globals']['value'] = $t('Disabled');
}*/
after refresh page

For most shared hosting environments, having a copy of php.ini file in your public_html directory works. A great way to do this is by copying the hosting company's copy

  system("cp /path/to/php/conf/file/php.ini  /home/yourusername/public_html/php.ini");  

Get /path/to/php/conf/file/php.ini by running phpinfo(); in a file. Then in your ini file, turn register_globals off