RE: [PHP-WIN] Security Alert! PHP CGI cannot be accessed directly.

101% sure I done the same but now I have rectifyed the problem by installing php from php installer cuz manualy thing was giving me that error. Thank you Faisal This e-mail is confidential and may also be privileged. If you are not the intended recipient, please notify us and delete the email from your computer immediately; you should not copy or use it for any purpose, nor disclose its contents to any other person. -----Original Message----- From: Shane Caraveo [mailto:shane@caraveo.com] Sent: Tuesday, April 16, 2002 9:54 PM To: faisal@gem.net.pk Cc: php-windows@lists.php.net Subject: Re: [PHP-WIN] Security Alert! PHP CGI cannot be accessed directly. Are you sure you changed the correct ini file or didn't misspell it? I use this all the time, no problem. Faisal Ashraf wrote: > > Hi All, > > I have installed new version of php on my xp box I am running iis for > my web's now I am getting this error even I have modified the php.ini > file value cgi.force_redirect=0 but I am still getting the same > problem any one could tell me how to remove this error ? > > Thank You > > Faisal Ashraf > Manager Customer Care > Gem Net > www.gem.net.pk > > > Security Alert! PHP CGI cannot be accessed directly. > > This PHP CGI binary was compiled with force-cgi-redirect enabled. This > means that a page will only be served up if the REDIRECT_STATUS CGI > variable is set. This variable is set, for example, by Apache's Action > directive redirect. > > > You may disable this restriction by recompiling the PHP binary with > the --disable-force-cgi-redirect switch. If you do this and you have > your PHP CGI binary accessible somewhere in your web tree, people will > be able to circumvent .htaccess security by loading files through the > PHP parser. A good way around this is to define doc_root in your > php.ini file to something other than your top-level DOCUMENT_ROOT. > This way you can separate the part of your web space which uses PHP > from the normal part using .htaccess security. If you do not have any > .htaccess restrictions anywhere on your site you can leave doc_root > undefined. If you are running IIS, you may safely set > cgi.force_redirect=0 in php.ini. > > > -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php