Security Alert! PHP CGI cannot be accessed directly. HELP!
| From: | Brett Jenkins | Date: | Fri, 17 May 2002 13:19:40 +0000 |
| Subject: | Security Alert! PHP CGI cannot be accessed directly. HELP! | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-98076@lists.php.net to get a copy of this message | ||
When using xitami with PHP I get the message:
Security Alert! PHP CGI cannot be accessed directly.
This PHP CGI binary was compiled with force-cgi-redirect enabled. This means that a page will only
be served up if the REDIRECT_STATUS CGI variable is set. This
variable is set, for example, by Apache's Action directive redirect.
You may disable this restriction by recompiling the PHP binary with the --disable-force-cgi-redirect
switch. If you do this and you have your PHP CGI binary accessible
somewhere in your web tree, people will be able to circumvent .htaccess security by loading files
through the PHP parser. A good way around this is to define doc_root in
your php.ini file to something other than your top-level DOCUMENT_ROOT. This way you can separate
the part of your web space which uses PHP from the normal part
using .htaccess security. If you do not have any .htaccess restrictions anywhere on your site you
can leave doc_root undefined. If you are running IIS, you may safely
set cgi.force_redirect=0 in php.ini.
I used the installer i have win 98 and its a test area before i upload to blueyoo.com
Any Ideas The Message Is Confusing!
Thanx In Advance
-----------
Brett Jenkins
Blueyoo.com Co - Creator, Co - Editor & Co -Moderator
http://www.blueyoo.com