Security Alert! PHP CGI cannot be accessed directly.
| From: | Faisal Ashraf | Date: | Tue, 16 Apr 2002 10:49:11 +0000 |
| Subject: | Security Alert! PHP CGI cannot be accessed directly. | ||
| Groups: | php.windows | ||
| Request: | Send a blank email to php-windows+get-13122@lists.php.net to get a copy of this message | ||
Hi All,
I have installed new version of php on my xp box I am running iis for my
web's now I am getting this error even I have modified the php.ini file
value cgi.force_redirect=0 but I am still getting the same problem any
one could tell me how to remove this error ?
Thank You
Faisal Ashraf
Manager Customer Care
Gem Net
www.gem.net.pk
Security Alert! PHP CGI cannot be accessed directly.
This PHP CGI binary was compiled with force-cgi-redirect enabled. This
means that a page will only be served up if the REDIRECT_STATUS CGI
variable is set. This variable is set, for example, by Apache's Action
directive redirect.
You may disable this restriction by recompiling the PHP binary with the
--disable-force-cgi-redirect switch. If you do this and you have your
PHP CGI binary accessible somewhere in your web tree, people will be
able to circumvent .htaccess security by loading files through the PHP
parser. A good way around this is to define doc_root in your php.ini
file to something other than your top-level DOCUMENT_ROOT. This way you
can separate the part of your web space which uses PHP from the normal
part using .htaccess security. If you do not have any .htaccess
restrictions anywhere on your site you can leave doc_root undefined. If
you are running IIS, you may safely set cgi.force_redirect=0 in php.ini.