note 54313 modified in security.hiding by danbrown
| From: | danbrown@php.net | Date: | Tue, 28 Dec 2010 00:43:52 +0000 |
| Subject: | note 54313 modified in security.hiding by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-175266@lists.php.net to get a copy of this message | ||
In order to get the PATH_INFO to work in order to pass parameters using a hidden program/trailing
slash/"pretty url" in more recent versions of PHP you MUST add "AcceptPathInfo
On" to your httpd.conf.
AddType application/x-httpd-php .php .html
AcceptPathInfo On
Try it out with your phpinfo page and you'll be able to search for PATH_INFO.
http://example.com/myphpinfo.php/showmetheway
If you want to drop the .php use one or both of these:
DefaultType application/x-httpd-php
ForceType application/x-httpd-php
--was--
In order to get the PATH_INFO to work in order to pass parameters using a hidden program/trailing
slash/"pretty url" in more recent versions of PHP you MUST add "AcceptPathInfo
On" to your httpd.conf.
AddType application/x-httpd-php .php .html
AcceptPathInfo On
Try it out with your phpinfo page and you'll be able to search for PATH_INFO.
http://yourserver.com/myphpinfo.php/showmetheway
If you want to drop the .php use one or both of these:
DefaultType application/x-httpd-php
ForceType application/x-httpd-php
http://php.net/manual/en/security.hiding.php