Re: Security Blues

As this is a security alert, you should read http://php.net/security For some reason, that cgi.force_redirect ini option is not documented in the security and the install sections. If you cannot make it work using this ini directive, please ask support questions using our support channels. For a list of appropriate places to ask for help using PHP, please visit http://php.net/support BTW after you know what to do with it, it would be nice from you to file a bug report at http://bugs.php.net/ categorized as a documentation problem, stating that this is missing from the docs, and should be added. Thanks, Goba [one webmaster@php.net] From: Howard Newell To: webmaster@php.net Sent: Monday, July 29, 2002 2:11 AM Subject: Security Blues Hey guys, OK, I', new at php, but I'm not crazy. I set up Xitami to work with php, and can't get past the "Security Alert! The PHP CGI cannot be accessed directly. "... Everywhere I look I'm told it's a simple matter of setting "cgi.force_redirect = 0" in the php.ini file. Would that it were so. The sad part is I got it working a couple of months ago, only to loose the whole system in a crash, and can't remember how I got past it first time! Could you help a guy out? What am I overlooking... something simple I'm sure! Howard howard@fbcmu.org