[Xitami] Newbie question: Xitami and php

[Marcio Marchini]

	A fresh install of the PHP  InstallShield should configure it all right, except
the security problem.

	Then you go to c:\winnt\PHP.ini (your windows dir) and declare this:

cgi.force_redirect = 0

	and that should work. In fact, you must have this value already in the INI,
commented out. In this case it is using the default value of 1, but you want 0.

	From this point on, you're on your own.

marcio

> -----Original Message-----
> From: xitami-admin@lists.xitami.org
> [mailto:xitami-admin@lists.xitami.org]On Behalf Of Ed op Het Net
> Sent: March 29, 2002 11:55 AM
> To: xitami-request@lists.xitami.org
> Subject: RE: [Xitami] Newbie question: Xitami and php
>
>
>
> xrlxo> Marcio Marchini wrote:
>
> xrlxo> go to php.ini (c:\winnt\php.ini) and add this:
> xrlxo> force-cgi-redirect=0
>
>
> Hi Marcio, this still doesn't work.
> After changing the cgi.force to zero, I still receive the same error.
> Next, I've changed the doc_root, but then I get a blank page.
> That is of course one step further :)
>
> I use phpinfo.php, containing the script:
>     <?php phpinfo();?>
>
> The output is a blank html-page.
>
> From the command line everything works fine, so it must be a matter of
> configurating the php.ini or Xitami.
>
> Do you think you can help me further?
>
> TIA, Edward
>
>
>
>
>
>
> >> -----Original Message-----
> >> [mailto:xitami-admin@lists.xitami.org]On Behalf Of Ed op Het Net
> >> Subject: [Xitami] Newbie question: Xitami and php
> >>
> >>
> >> I have Xitami up and running on Windows 98 SE.
> >> I've installed the latest distribution of php4.
> >> Now, whenever I open a php-file (like phpinfo.php)
> >> in my browser on the localhost-adress I receive the following message:
> >>
> >> "Security Alert! PHP CGI cannot be accessed directly.
> >> This PHP CGI binary was compiled with force-cgi-redirect enabled.
> >> This means that a page will only be served up if the REDIRECT_STATUS
> >> CGI variable
> >> is set. This variable is set, for example, by Apache's Action
> >> directive redirect.
> >> You may disable this restriction by recompiling the PHP binary with
> >> the --disable-force-cgi-redirect switch. If you do this and you have your
> >> PHP CGI binary accessible somewhere in your web tree, people will
> be able to
> >> circumvent .htaccess security by loading files through the PHP parser.
> >> A good way around this is to define doc_root in your php.ini file to
> >> something other
> >> than your top-level DOCUMENT_ROOT. This way you can separate the part
> >> of your web space
> >> which uses PHP from the normal part using .htaccess security. If you
> >> do not have
> >> any .htaccess restrictions anywhere on your site you can leave
> >> doc_root undefined.
> >> If you are running IIS, you may safely set cgi.force_redirect=0 in
> >> php.ini."
> >>
> >> I tried everything, but I can't get it to work, and an internet- and
> >> faq-search didn't make me any wiser.
> >> Can someone explain me in plain and simple English which steps I have
> >> to take to solve this?
> >>
> >> Thanks in advance, Edward
> >>
>
>
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
>