A while back, I had intended to buy a directory script and begin to run into the question of "register_globals" being turned "off" or "on" and the security risks posed by having them on. Searching the forum, here, I find that some modules require them to be on, but no-one mentioned which ones. Does anyone know what functionality is lost in XOOPS by having register_globals off?

Also, in general, I'm wondering how I might take advantage of scripts that require them to be on without compromising my entire site. For example, my hosing service says they can turn them on in one directory and leave them off in another. I was wondering if that would kind of quaranteen the risk--and also if perhaps having them use their own mySQL database would be advisable. Any ideas?

Thank you.

XOOPS2 works with register_globals turned off. All the core modules do so too, and I don't know of a module that does not work with register_globals turned off.

Herko