Re: How to painlessly defuse the CGI exploit.
| From: | Phil Driscoll | Date: | Mon, 13 May 2002 12:45:06 +0000 |
| Subject: | Re: How to painlessly defuse the CGI exploit. | ||
| References: | 1 2 | Groups: | php.cvs |
| Request: | Send a blank email to php-cvs+get-11895@lists.php.net to get a copy of this message | ||
On Monday 13 May 2002 12:04 am, Shane Caraveo wrote:
> The problem is documentation and installation. The php windows
> installer should set the php.ini entry apropriately for what web server
> it is installing onto. For upgrades, users should read the change notes
> and documentation to see how the upgrade will effect them.
For info, the PHP windows installer edits php.ini and sets
cgi.force-redirect=0 for all flavours of IIS and PWS. For all other web
servers it leaves the default (1) set.
Cheers
--
Phil Driscoll