[Xitami] Newbie question: Xitami and php
Ed op Het Net
xitami@lists.xitami.org
Fri, 29 Mar 2002 17:55:17 +0100
xrlxo> Marcio Marchini wrote:
xrlxo> go to php.ini (c:\winnt\php.ini) and add this:
xrlxo> force-cgi-redirect=0
Hi Marcio, this still doesn't work.
After changing the cgi.force to zero, I still receive the same error.
Next, I've changed the doc_root, but then I get a blank page.
That is of course one step further :)
I use phpinfo.php, containing the script:
<?php phpinfo();?>
The output is a blank html-page.
>From the command line everything works fine, so it must be a matter of
configurating the php.ini or Xitami.
Do you think you can help me further?
TIA, Edward
>> -----Original Message-----
>> [mailto:xitami-admin@lists.xitami.org]On Behalf Of Ed op Het Net
>> Subject: [Xitami] Newbie question: Xitami and php
>>
>>
>> I have Xitami up and running on Windows 98 SE.
>> I've installed the latest distribution of php4.
>> Now, whenever I open a php-file (like phpinfo.php)
>> in my browser on the localhost-adress I receive the following message:
>>
>> "Security Alert! PHP CGI cannot be accessed directly.
>> This PHP CGI binary was compiled with force-cgi-redirect enabled.
>> This means that a page will only be served up if the REDIRECT_STATUS
>> CGI variable
>> is set. This variable is set, for example, by Apache's Action
>> directive redirect.
>> You may disable this restriction by recompiling the PHP binary with
>> the --disable-force-cgi-redirect switch. If you do this and you have your
>> PHP CGI binary accessible somewhere in your web tree, people will be able to
>> circumvent .htaccess security by loading files through the PHP parser.
>> A good way around this is to define doc_root in your php.ini file to
>> something other
>> than your top-level DOCUMENT_ROOT. This way you can separate the part
>> of your web space
>> which uses PHP from the normal part using .htaccess security. If you
>> do not have
>> any .htaccess restrictions anywhere on your site you can leave
>> doc_root undefined.
>> If you are running IIS, you may safely set cgi.force_redirect=0 in
>> php.ini."
>>
>> I tried everything, but I can't get it to work, and an internet- and
>> faq-search didn't make me any wiser.
>> Can someone explain me in plain and simple English which steps I have
>> to take to solve this?
>>
>> Thanks in advance, Edward
>>