Re: CLI Web Server customization

From: Date: Wed, 06 Nov 2013 20:00:08 +0000
Subject: Re: CLI Web Server customization
References: 1 2 3  Groups: php.internals 
Request: Send a blank email to internals+get-70037@lists.php.net to get a copy of this message
Hi Adam, On Thu, Nov 7, 2013 at 1:45 AM, Adam Harvey <aharvey@php.net> wrote: > My recollection of the discussion at the time was that part of the > reasoning behind that note was security: the CLI server was a new > piece of code, and the public Internet is a pretty hostile place, > particularly for Web servers. Therefore the intention was to > discourage users from exposing the CLI server on anything other than > loopback and private networks. > > It doesn't sound like that's a problem for Kevin, but I'm pretty sure > that was part of the context there. > I agree. There was security issue in cli server in fact. Current documentation is too much. IMHO. It may be good time to modify our doc a little. Any objection for making security warning to a note that discourages use under internet? Regards, -- Yasuo Ohgaki yohgaki@ohgaki.net

« previous php.internals (#70037) next »