cP Release update overwriting cP php.ini w/reg_globals ON

[MaraBlue]

The last 2 cPanel updates, to 11.18.6-RELEASE_24654 and 11.23.1-RELEASE_24893 have overwritten the cPanel php.ini (/usr/local/cpanel/3rdparty/etc/php.ini) and changed the register_globals back to ON (I had them OFF).

I verified they were off, took screen shots, upgraded cPanel, then checked and cPanel's PHP register_globals are back on (and my comments were deleted from php.ini, so it's being replaced).

I can't for the life of me figure why cPanel would want register_globals on (again, this is for cPanel's own internal PHP, but it shouldn't need register_globals on, nor want it).

Am I missing something, or is this a bug?

[cpanelkenneth]

The last 2 cPanel updates, to 11.18.6-RELEASE_24654 and 11.23.1-RELEASE_24893 have overwritten the cPanel php.ini (/usr/local/cpanel/3rdparty/etc/php.ini) and changed the register_globals back to ON (I had them OFF).

I verified they were off, took screen shots, upgraded cPanel, then checked and cPanel's PHP register_globals are back on (and my comments were deleted from php.ini, so it's being replaced).

I can't for the life of me figure why cPanel would want register_globals on (again, this is for cPanel's own internal PHP, but it shouldn't need register_globals on, nor want it).

Am I missing something, or is this a bug?

Did you turn off register globals in Tweak Settings?

[MaraBlue]

Did you turn off register globals in Tweak Settings?

Epppp...you kids and your GUI settings. I didn't know there was a setting in WHM, I changed it with vi.

In "Tweak Settings" there is: cPanel PHP Register Globals (Off is recommended for security reasons), and it's checked. I have to say the wording there isn't too clear, but I'll assume that checked == ON, so I'll uncheck it and see what happens.

Thanks for the reply!

EDIT: Apparently it's *not* cPanel overwriting cPanel's php.ini...it's Fantastico.

http://www.netenberg.com/forum/index.php?topic=6569.0

From Fantastico's admin panel in WHM:

Fixed: "register_globals" Bug - http://www.netenberg.com/forum/index.php?topic=6569.0
Fantastico will add to or create /scripts/postupcp if it doesn't exist. We are adding code which will re-enable register_globals only on the backend copy of PHP that is used solely for cPanel and WHM. An upcoming release of Fantastico will remove this code and turn off register_globals.

*sigh*

[bhd]

Yeah, that had me going for a while too. To have it "off" it seems it must be unchecked. The wording is ambiguous.

[MaraBlue]

Yeah, that had me going for a while too. To have it "off" it seems it must be unchecked. The wording is ambiguous.

Glad it's not just me

Seems it's Fantastico overwriting the internal php.ini.

[cpanelnick]

The wording has been adjusted in the latest release.

[MaraBlue]

The wording has been adjusted in the latest release.

Wow, that's awesome. Thanks!