MediaWiki 1.82: PHP register_globals and memcaching

[paradox]

Hi,

The installation script for MW 1.8.2 recommends turning register_globals to "off" due to potential security risks and also enabling memcaching if available. This leaves me with two questions: 1) Should a user make the request, will SiteGround disable register_globals on the standard hosting package (shared server)? 2) Is memcaching available and if not, can SiteGround install it for standard hosting customers?

Thanks.

[Brandon]

Hi :)

The register_globals can be turned off for your account by creating a file named php.ini and inserting this row into it:

register_globals = OFF

Once this file is created, it must be spread in all MediaWiki directories, in order to take effect for the whole application.

They are currently set to off to some of the servers we manage, due to some applications, yet outdated, requirements. However, we have provided an alternative way of disabling them, while we are thinking of a global solution for this potential security breach.

As to the memcaching, unfortunately, it tends to use a lot (I mean really a lot) of resources and memory on the server, when used unoptimized (while optimizing is not yet easy job with it and very small amount of scripts do it all right for a shared server). This is why we provide it only on a VPS/Dedicated Server packages, per Customer's request.

[paradox]

Hi,

Do I have to put the "php.ini" in every single directory, or just those containing PHP scripts? Because the image directories are numerous and that would just be more trouble than its really worth. :)

[Brandon]

Oops :) It's my bad for not clarifying. Only in the directories with php files into them, yes, the folders containing images do not need php.ini files.