note 28870 deleted from security.cgi-bin by tomsommer
| From: | tomsommer@php.net | Date: | Sun, 04 Jul 2004 16:56:08 +0000 |
| Subject: | note 28870 deleted from security.cgi-bin by tomsommer | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-72537@lists.php.net to get a copy of this message | ||
Note Submitter: islet8@islet8.com
----
Thank for cassidydr's help!
php.ini says:
; cgi.force_redirect is necessary to provide security running PHP as a CGI under
; most web servers. Left undefined, PHP turns this on by default. You can
; turn it off here AT YOUR OWN RISK
; **You CAN safely turn this off for IIS, in fact, you MUST.**
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
cgi.force_redirect = 0
That's it!