cvs: php4(PHP_4_3) / php.ini-dist php.ini-recommended /sapi/cgi cgi_main.c

shane Sun May 25 14:35:19 2003 EDT Modified files: (Branch: PHP_4_3) /php4 php.ini-dist php.ini-recommended /php4/sapi/cgi cgi_main.c Log: http://bugs.php.net/bug.php?id=23800 change the default for those who cannot this was actually done a long time ago, but got reverted along the way Index: php4/php.ini-dist diff -u php4/php.ini-dist:1.171.2.12 php4/php.ini-dist:1.171.2.13 --- php4/php.ini-dist:1.171.2.12 Wed May 7 21:23:35 2003 +++ php4/php.ini-dist Sun May 25 14:35:18 2003 @@ -444,6 +444,14 @@ ; cause security issues, KNOW WHAT YOU ARE DOING FIRST. ; cgi.redirect_status_env = ; +; cgi.fix_pathinfo provides *real* PATH_INFO/PATH_TRANSLATED support for CGI. PHP's +; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok +; what PATH_INFO is. For more information on PATH_INFO, see the cgi specs. Setting +; this to 1 will cause PHP CGI to fix it's paths to conform to the spec. A setting +; of zero causes PHP to behave as before. Default is zero. You should fix your scripts +; to use SCRIPT_FILENAME rather than PATH_TRANSLATED. +; cgi.fix_pathinfo=0 + ; FastCGI under IIS (on WINNT based OS) supports the ability to impersonate ; security tokens of the calling client. This allows IIS to define the ; security context that the request runs under. mod_fastcgi under Apache Index: php4/php.ini-recommended diff -u php4/php.ini-recommended:1.119.2.10 php4/php.ini-recommended:1.119.2.11 --- php4/php.ini-recommended:1.119.2.10 Wed May 7 21:23:35 2003 +++ php4/php.ini-recommended Sun May 25 14:35:18 2003 @@ -459,6 +459,14 @@ ; cause security issues, KNOW WHAT YOU ARE DOING FIRST. ; cgi.redirect_status_env = ; +; cgi.fix_pathinfo provides *real* PATH_INFO/PATH_TRANSLATED support for CGI. PHP's +; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok +; what PATH_INFO is. For more information on PATH_INFO, see the cgi specs. Setting +; this to 1 will cause PHP CGI to fix it's paths to conform to the spec. A setting +; of zero causes PHP to behave as before. Default is zero. You should fix your scripts +; to use SCRIPT_FILENAME rather than PATH_TRANSLATED. +; cgi.fix_pathinfo=1 + ; FastCGI under IIS (on WINNT based OS) supports the ability to impersonate ; security tokens of the calling client. This allows IIS to define the ; security context that the request runs under. mod_fastcgi under Apache Index: php4/sapi/cgi/cgi_main.c diff -u php4/sapi/cgi/cgi_main.c:1.190.2.29 php4/sapi/cgi/cgi_main.c:1.190.2.30 --- php4/sapi/cgi/cgi_main.c:1.190.2.29 Wed May 21 05:34:15 2003 +++ php4/sapi/cgi/cgi_main.c Sun May 25 14:35:18 2003 @@ -20,7 +20,7 @@ +----------------------------------------------------------------------+ */ -/* $Id: cgi_main.c,v 1.190.2.29 2003/05/21 09:34:15 zeev Exp $ */ +/* $Id: cgi_main.c,v 1.190.2.30 2003/05/25 18:35:18 shane Exp $ */ #include "php.h" #include "php_globals.h" @@ -1062,7 +1062,7 @@ #if ENABLE_PATHINFO_CHECK if (cfg_get_long("cgi.fix_pathinfo", &fix_pathinfo) == FAILURE) { - fix_pathinfo = 1; + fix_pathinfo = 0; } #endif