Re: Re: PHP Security Alert for Apache/Win32
| From: | (David) | Date: | Mon, 07 Jan 2002 01:34:13 +0000 |
| Subject: | Re: Re: PHP Security Alert for Apache/Win32 | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-79630@lists.php.net to get a copy of this message | ||
I tried playing with ScriptAlias settings, but i given up. I now use the the Apache module instead
of cgi.
To change over to the Apache module:
copy php4ts.dll to the windows/system(win9x/Me) or winnt/system32(winNT/2000/XP) directory.
then inside httpd.conf:
LoadModule php4_module c:/php/sapi/php4apache.dll
AddType application/x-httpd-php .php .phtml
remember to comment out the most important part after converting:
# ScriptAlias /php4/ \"C:/php/\"
# Action application/x-httpd-php4 \"/php4/php.exe\"
# AddType application/x-httpd-php4 .php
folks who are using PHP as a CGI under apache for win32, please read this:
http://www.securiteam.com/windowsntfocus/5ZP030U60U.html
http://www.hackers.com/new/currentnews.php?nid=5