View source for How can you change PHP settings using htaccess?

==Directions==

1. Open the ''.htaccess'' file located in your site's home directory. If you don't have one, create a blank one now. Note the period character (.) at the beginning of the file name.

2. Add any of the following code samples to your ''.htaccess'' file, each on its own line. These sample commands will prevent common global variable injection attacks, cross site scripting (XSS) attacks, and code injection attacks.

<syntaxhighlight>
php_flag register_globals off
php_flag allow_url_fopen off
</syntaxhighlight>

3. Save the .htaccess file in your site's home directory.

4. Test your site's frontend and backend.

<noinclude>[[Category:FAQ]]
[[Category:Administration FAQ]]
[[Category:Version 1.5 FAQ]]
[[Category:Installation]]</noinclude>