[cgiwrap-users] cgiwrap and PHP

[Gary W. <gw...@pl...>]

Hi all!

I am facing a problem which on the face of it could have more than one
solution, I wish to use PHP in CGI mode (not CLI mode) because PHP in
CGI mode offers a few features/checks to make it a little more secure
than offering access to the CLI version.  However, when using it in
conjunction with cgiwrap, the following appears:

__quote__
Security Alert! The PHP CGI cannot be accessed directly. 

This PHP CGI binary was compiled with force-cgi-redirect enabled. This
means that a page will only be served up if the REDIRECT_STATUS CGI
variable is set, e.g. via an Apache Action directive.

For more information as to why this behaviour exists, see the manual
page for CGI security.

For more information about changing this behaviour or re-enabling this
webserver, consult the installation file that came with this
distribution, or visit the manual page.
__end quote___

I can solve this by going to the CLI version, or by trying to
incorporate an Action directive in my virtualhost before my 
rewrite rules (investigating this idea next), but I was wondering what
are others' experiences of PHP and cgiwrap?  What is  the "best"
solution to this (meaning most secure)?

Many thanks

GW