From: Janusz Dobrowolski <janusz@frontaccounting.eu>
Date: Wed, 18 Mar 2009 14:28:35 +0000 (+0000)
Subject: Comments on php.ini settings for CGI php mode.
X-Git-Tag: 2.3-final~1321
X-Git-Url: https://delta.frontaccounting.com/gitweb/?p=fa-stable.git;a=commitdiff_plain;h=c3a6a79620e75530bb8beffb9b81ca14430de5ae

Comments on php.ini settings for CGI php mode.
---

diff --git a/install.html b/install.html
index 974bf8b2..a61c3784 100644
--- a/install.html
+++ b/install.html
@@ -27,6 +27,14 @@ system relies on. Classes are used extensively by this system. When
 sessions are required they are started by the system and this setting
 of <strong><em>session.auto_start</em></strong>
 can and should be set to 0. </li>
+<li>
+For security reasons both Register Globals and Magic Quotes php settings 
+should be set to Off. When FrontAccounting is used with www server running 
+php as Apache module, respective flags are set in .htaccess file. When your
+server uses CGI interface to PHP you should set 
+<strong><em>magic_quotes_gpc = 0</em></strong> and 
+<strong><em>register_globals = 0</em></strong> in php.ini file.
+</li>
 <li><strong><em>Innodb</em></strong>
 tables must be enabled in the MySQL server. These tables allow database
 transactions which are a critical component of the software. This is