Quote Originally Posted by The-Spec View Post
Just remove the web based shell and turn register_globals, allow_url_fopen, and allow_url_include off. The very least people could do is htaccess their cpanel-ish scripts.
Ok... I understand deleting the shell/php file, but the register_globals, allow_url_fopen and url_include ... where would I make those changes?

This is hosted on a server that I don't have control over. Is that on their end or are these settings in ZC?