I successfully installed Protector. But...

Under the Security Advisor, I have these warnings.

'register_globals' : on Not secure
This setting invites a variety of injection attacks.

'allow_url_fopen' : on Not secure
This setting allows attackers to execute arbitrary scripts on remote servers.

I tried checking the various options in the preferences menu, but even setting those not recommended to yes didn't change the warnings to OK.

Can someone tell me what I need to do to fix this so they all come green/OK?

Register_globals can be disabled if you are the server admin in the PHP.ini. If you are not the server admin you can disable it in the .htaccess file with:

php_flag register_globals off

allow_url_fopen you need to be the server admin to disable this. If you are you can edit the PHP.ini or HTTP.conf

If you are not the admin you will need to contact them to disable it. If you are on shared hosting most will not for compatibility with other sites.

Thank you so much.

CC