Since being scriptkiddied the other day, I've been looking for information about turning the register_globals OFF.
I'm hosted with Hostgator and, after researching their forums, I noticed that they generally run sites with the register_globals ON by default. Obviously, this is problematic.
Looking into things more, I noticed that the alteration to turn the reg's OFF has to be made in the php.ini file in the public_html, however I couldn't find that file in there. I had to contact hostgator, via their online chat and the tech implemented the file for me and turned the register_globals to OFF.
If you're on hostgator, please insure to get the reg turned off asap. If you're lost as to what to do, just contact their live representatives and they can sort it out for you.
*Go to software/services section
*Select php config
*You can sometimes select Ion Cube or Source Guardian
*Then click the button to install the php.ini master file
*Check public_html and php.ini should be there
That option is available only if you have root access with WHM.
Or you can turn it off in the .htaccess file in the root. This gives 500 error on some servers.
So what you mention I would consider a priveledge that they actually allow it. 99% of hosts this is not even an option.
I do like hostmonster and push them when I can. I guess I have one more plus I can push about them now.