RE: [cgiwrap-users] cgiwrap and PHP

[Neulinger, N. <nn...@um...>]

Rebuild the PHP interpreter without force-cgi-redirect.

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nn...@um...
University of Missouri - Rolla         Phone: (573) 341-6679
UMR Information Technology             Fax: (573) 341-4216
=20

> -----Original Message-----
> From: cgi...@li...=20
> [mailto:cgi...@li...] On Behalf=20
> Of Gary Wilson
> Sent: Thursday, March 17, 2005 9:21 AM
> To: cgi...@li...
> Subject: [cgiwrap-users] cgiwrap and PHP
>=20
> Hi all!
>=20
> I am facing a problem which on the face of it could have more than one
> solution, I wish to use PHP in CGI mode (not CLI mode) because PHP in
> CGI mode offers a few features/checks to make it a little more secure
> than offering access to the CLI version.  However, when using it in
> conjunction with cgiwrap, the following appears:
>=20
> __quote__
> Security Alert! The PHP CGI cannot be accessed directly.=20
>=20
> This PHP CGI binary was compiled with force-cgi-redirect enabled. This
> means that a page will only be served up if the REDIRECT_STATUS CGI
> variable is set, e.g. via an Apache Action directive.
>=20
> For more information as to why this behaviour exists, see the manual
> page for CGI security.
>=20
> For more information about changing this behaviour or re-enabling this
> webserver, consult the installation file that came with this
> distribution, or visit the manual page.
> __end quote___
>=20
> I can solve this by going to the CLI version, or by trying to
> incorporate an Action directive in my virtualhost before my=20
> rewrite rules (investigating this idea next), but I was wondering what
> are others' experiences of PHP and cgiwrap?  What is  the "best"
> solution to this (meaning most secure)?
>=20
> Many thanks
>=20
> GW
>=20
>=20
>=20
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from=20
> real users.
> Discover which products truly live up to the hype. Start reading now.
> http://ads.osdn.com/?ad_id=3D6595&alloc_id=3D14396&op=3Dclick
> _______________________________________________
> cgiwrap-users mailing list
> cgi...@li...
> https://lists.sourceforge.net/lists/listinfo/cgiwrap-users
>=20
>=20