Re: CLI Web Server customization

On 11/06/2013 12:00 PM, Yasuo Ohgaki wrote:

Hi Adam, On Thu, Nov 7, 2013 at 1:45 AM, Adam Harvey <aharvey@php.net> wrote:

My recollection of the discussion at the time was that part of the reasoning behind that note was security: the CLI server was a new piece of code, and the public Internet is a pretty hostile place, particularly for Web servers. Therefore the intention was to discourage users from exposing the CLI server on anything other than loopback and private networks. It doesn't sound like that's a problem for Kevin, but I'm pretty sure that was part of the context there.

I agree. There was security issue in cli server in fact. Current documentation is too much. IMHO. It may be good time to modify our doc a little. Any objection for making security warning to a note that discourages use under internet?

One reason for suggesting it is only for limited use is so that users don't expect it to be (or to become) a fully featured web server. Chris -- christopher.jones@oracle.com http://twitter.com/ghrd Free PHP & Oracle book: http://www.oracle.com/technetwork/topics/php/underground-php-oracle-manual-098250.html