RE: [PHP-WIN] Security Alert when trying to access a php file

If you read the php.ini file where the cgi.force_redirect variable is set, it states that this MUST be turned off when running under IIS. Try this ; cgi.force_redirect is necessary to provide security running PHP as a CGI under ; most web servers. Left undefined, PHP turns this on by default. You can ; turn it off here AT YOUR OWN RISK ; **You CAN safely turn this off for IIS, in fact, you MUST.** ; cgi.force_redirect = 1 cgi.force_redirect = 0 hth, Duane -----Original Message----- From: Jack [mailto:nedcor4@nedcor.com.hk] Sent: Monday, August 04, 2003 3:25 AM To: php-install@lists.php.net; php-windows@lists.php.net Subject: [PHP-WIN] Security Alert when trying to access a php file Dear all I had install PHP to my Win2k Server which running IIS 5.0. I had copied the 'php.ini-dist' to c:\winnt, php4ts.dll to c:\winnt\system32. Also had configurated the App Tab inside Internet Service manager. Now when i try to access the php file through intranet, it keep prompts me the following error : Security Alert! The PHP CGI cannot be accessed directly. This PHP CGI binary was compiled with force-cgi-redirect enabled. This means that a page will only be served up if the REDIRECT_STATUS CGI variable is set, e.g. via an Apache Action directive. For more information as to why this behaviour exists, see the manual page for CGI security <http://php.net/security.cgi-bin>. For more information about changing this behaviour or re-enabling this webserver, consult the installation file that came with this distribution, or visit the manual page <http://php.net/install.windows>." I had check the php.ini which inside the c:\winnt, and turn the cgi.force_redirection from 1 to 0, but still showing the same warning again!!! Can someone please tell me what to do? Thx Jack -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php