Newbie having issues - please be gentle!

I’ve successfully installed my copy of modx and am frankly over the moon with it.

I’ve got this niggling error that comes up on the admin screen and I can’t seem to fix it:-


One or more configuration details didn’t check out OK:

Configuration warning: ’register_globals is set to ON in your php.ini configuration file’

What does this mean?

This configuration makes your site much more susceptible to Cross Site Scripting (XSS) attacks. You should speak to your host about what you can do to disable this setting.

Configuration warning: ’The Unauthorized page defined in the site configuration settings is not published.’

What does this mean?
This means that your Unauthorized page is inaccessible to the general public. Publish the page or make sure it is assigned to an existing document in your site tree in the Tools > Configuration menu.

1. I’ve contacted my system support and they’ve told me the php.ini file is set to OFF - so why am I still getting the error.
2. I’ve looked and looked and cant find what it means by the ’Unauthorized page’?

Help!

Installed on:-
Apache version 1.3.37 (Unix)
PHP version 4.4.7
MySQL version 5.0.27-standard
Architecture i686
Operating system Linux

The unauthorized page is defined in the config settings (Tools tab > configuration > Site tab) within the manager. The explanatory text says:

Enter the ID of the document you want to send users to if they have requested a secured or unauthorized document. NOTE: make sure the ID you enter belongs to an existing document, and that it has been published and is publicly accessible!

As far as your globals, again, in the manager, go to the Reports tab > system info then use the phpInfo link and search for register_globals. That will tell you if they’re really on or not. If they’re on, your host should have information about changing that setting (if they allow it).

If you have access to the .htaccess / ht.access file in your MODx installed root, open/edit the files, search for the code line below

Drop the hash(#) and save it.

Quote from: MotSmart at Sep 06, 2007, 04:17 PM

If you have access to the .htaccess / ht.access file in your MODx installed root, open/edit the files, search for the code line below

#php_flag register_globals Off

Drop the hash(#) and save it.

Also, you’ll have to change the name from ht.access to .htaccess if you haven’t done so already in order for the change to have any effect.

Bob

Yea, Thats right!, forgot to mention lol, Thanks Bob.

Thanks for all the responses - much appreciated!!!

The configuration one fixed perfectly - but the register_globals doesn’t change in the .htaccess file. I just get a Server 500 Error.

I added the line to my php.ini file as indicated and still no joy. Contacted my hosts after checking the phpinfo lin as suggested = THANKS AGAIN!!!