Re: [mod-security-users] Apache 2, AddHandler

[<gve...@mi...>]

Hi Daniel,
This is exactly what I have in /etc/httpd/conf.d/php.ini and there is no 
AddHandler directive... maybe could be added?


#
# PHP is an HTML-embedded scripting language which attempts to make it
# easy for developers to write dynamically generated webpages.
#

LoadModule php4_module modules/libphp4.so

#
# Cause the PHP interpreter handle files with a .php extension.
#
<Files *.php>
    SetOutputFilter PHP
    SetInputFilter PHP
    LimitRequestBody 524288
</Files>

#
# Add index.php to the list of files that will be served as directory
# indexes.
#
DirectoryIndex index.php




Code Fish Security wrote:

> Ivan Ristic wrote:
>
>> Geffrey Velásquez wrote:
>>
>>>
>>> But.. in the httpd.conf that comes with RHEL3 (Apache 2) is not 
>>> present AddType or AddHandler for php, is correct to add this 
>>> directive? PHP is running as MODULE and working well without AddType.
>>
>>
>>
>>   That's (probably) because RHEL3 uses a version of PHP that integrates
>>   with Apache 2 using the filter mechanism. Look for "php" in
>>   httpd.conf and you'll find other directives. That means that you
>>   cannot rely on DynamicOnly settings.
>>
>>   FYI, the filter integration method has been abandoned, and replaced
>>   with the "standard" handler method. So if you download a newer
>>   version of PHP you'll be able to get DynamicOnly to work.
>>
> Thankfully it's not that bad. RHEL (and Fedora) have a 
> /etc/httpd/conf.d/ directory that holds a number of sub confs. In 
> httpd.conf you'll notice it will include all *.conf files in this 
> directory. This makes life a lot easier as you can store your 
> extensions/virtualhosts as seperate config files in here rather than a 
> monolithing httpd.conf. You will see one in there called php.conf 
> which contains the AddHandler line.
>
> All the best
>
> Daniel McNamara
> Code Fish Sys ADmin
>
>
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real users.
> Discover which products truly live up to the hype. Start reading now.
> http://ads.osdn.com/?ad_ide95&alloc_id396&opÌk
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users