I installed MODX recently so far so good, but I am getting this warning:
Configuration warning: ’register_globals is set to ON in your php.ini configuration file’
What does this mean?
This configuration makes your site much more susceptible to Cross Site Scripting (XSS) attacks. You should speak to your host about what you can do to disable this setting.
I am on a shared hosting, I have two questions:
1) How serious is this vulnerability?
2) Can I solve this myself without contacting my host?
-
☆ A M B ☆
- 24,524 Posts
You should be able to turn it off in your .htaccess file.
php_flag register_globals off
Thank you for help, actually now I uninstalled modcmx, it has been a painful decision because I had
already spent 10 hours with it and I thought I had got to grips with the thing.
I am really impressed about its features but I am only an end user and my web design skills are pretty poor,
my PHP knowledge is zero, it does not look like suitable for me, far too difficult, I went back to Wordpress.
-
☆ A M B ☆
- 24,524 Posts
Yes, MODx does require some level of HTML/CSS skill, and at least some knowledge of PHP/MySQL to use it to advantage. That’s why we call it a "framework"; it’s a tool for developers to create sites with.
