Possible security issue

Hi,

I wonder if I could get in touch by with someone from the MODx staff in charge of security.

Thank you Ryan for the help!

I totally missed the security announcement today If you site is hosted in 1and1, you better follow it.
http://modxcms.com/forums/index.php/topic,8604.msg60548.html

You mean 1&1 shared hosting has register_globals turned On ?

Bad, bad thing...

Indeed.

register_globals On         On

I’ll try to find out if it can be turned off locally.

edit:
if someone else wants to know, you have to put a php.ini file with ’register_globals = 0’ in every single folder with php scripts. .htacess directive ’php_flag register_globals off’ doesn’t work.