ID: 16111 Updated by: [EMAIL PROTECTED] Reported By: [EMAIL PROTECTED] -Status: Bogus +Status: Open Bug Type: PWS related Operating System: Win98SE -PHP Version: 4.1.2 +PHP Version: 4.1.2 Installer New Comment:
The files I downloaded are what are on the download page Latest version of PHP Before you download, make sure you're using a mirror close to you. You can change mirrors at the bottom of the page. ect.. PHP 4.1.2 zip package [5,824Kb] - 12 March 2002 (CGI binary (with security fixes) plus server API versions for Apache, AOLserver, ISAPI and NSAPI. MySQL support built-in, many extensions included, packaged as zip) PHP 4.1.2 installer [920Kb] - 12 March 2002 (CGI only (with fixes), MySQL support built-in, packaged as Windows installer to install and configure PHP, and automatically configure IIS, PWS and Xitami, with manual configuration for other servers. N.B. no external extensions included) Previous Comments: ------------------------------------------------------------------------ [2002-03-16 06:56:44] [EMAIL PROTECTED] The bug system is not the appropriate forum for asking support questions. For a list of a range of more appropriate places to ask for help using PHP, please visit http://www.php.net/support.php Ooops... clicked wrong link. Your version of PHP is not too old, but you shouldn't ask support questions here. ------------------------------------------------------------------------ [2002-03-16 06:54:42] [EMAIL PROTECTED] The version of PHP that this bug was reported in is too old. Please try to reproduce this bug in the latest version of PHP (available from http://www.php.net/downloads.php If you are still able to reproduce the bug with one of the latest versions of PHP, please change the PHP version on this bug report to the version you tested and change the status back to "Open". ------------------------------------------------------------------------ [2002-03-15 23:05:22] [EMAIL PROTECTED] Following the instruction with the CGI/Manual instalation does not work with PWS on a Win98 system. Security Alert! PHP CGI cannot be accessed directly. This PHP CGI binary was compiled with force-cgi-redirect enabled. This means that a page will only be served up if the REDIRECT_STATUS CGI variable is set. This variable is set, for example, by Apache's Action directive redirect. You may disable this restriction by recompiling the PHP binary with the --disable-force-cgi-redirect switch. If you do this and you have your PHP CGI binary accessible somewhere in your web tree, people will be able to circumvent .htaccess security by loading files through the PHP parser. A good way around this is to define doc_root in your php.ini file to something other than your top-level DOCUMENT_ROOT. This way you can separate the part of your web space which uses PHP from the normal part using .htaccess security. If you do not have any .htaccess restrictions anywhere on your site you can leave doc_root undefined. If you are running IIS, you may safely set cgi.force_redirect=0 in php.ini. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=16111&edit=1
