Quote:
Which dir do I need to turn off register_globals or other items, thats what I need to know
any directory that contains executable scripts that can be called directly from the url... such as root folder, modules/<module>/
and the admin folders.
you can add php.ini files to all folders automatically, by using .htaccess
SetEnv PHPRC /path to your custom php.ini/
then you only need to create 1 php.ini and store it in that location. the htaccess will take care of the rest.
remember to chmod the php.ini file to 600 afterwards.