InstallShield
| From: | Bob G | Date: | Sat, 16 Nov 2002 12:57:18 +0000 |
| Subject: | InstallShield | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-124718@lists.php.net to get a copy of this message | ||
Hello People! I am still struggling to get PHP up and running. I have used
Installshield and all the defaults suggested. I am using Dreamweaver which
in turn uses IIS at LocalHost. I use the suggested code :-
Running under win2000 and IIS.
<html>
<head>
<title>PHP Test 3</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<?php echo "Hello World<p>"; ?>
</body>
</html>
I receive the following error :-
"Security Alert! The PHP CGI cannot be accessed directly.
This PHP CGI binary was compiled with force-cgi-redirect enabled. This means
that a page will only be served up if the REDIRECT_STATUS CGI variable is
set, e.g. via an Apache Action directive."
I went to my PHP.INI file (Despite the InstallShield saying I needn't) and
this is what I found:-
; The root of the PHP pages, used only if nonempty.
; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root
; if you are running php as a CGI under any web server (other than IIS)
; see documentation for security issues. The alternate is to use the
; cgi.force_redirect configuration below
doc_root =
; The directory under which PHP opens the script using /~usernamem used only
; if nonempty.
user_dir =
; Directory in which the loadable extensions (modules) reside.
extension_dir = ./
; Whether or not to enable the dl() function. The dl() function does NOT
work
; properly in multithreaded servers, such as IIS or Zeus, and is
automatically
; disabled on them.
enable_dl = On
; cgi.force_redirect is necessary to provide security running PHP as a CGI
under
; most web servers. Left undefined, PHP turns this on by default. You can
; turn it off here AT YOUR OWN RISK
; **You CAN safely turn this off for IIS, in fact, you MUST.**
; cgi.force_redirect = 1
cgi.force_redirect = 0
As we can see I MUST turn cgi.force_redirect to off and indeed it is. I
therefore don't understand the security alert.
The doc_root = is as InstallShield installed it. I have tried C:/PHP with
no change in results.
Could someone please explain what I am doing wrong and suggest a solution.
Many thanks Bob G.