From: [EMAIL PROTECTED] Operating system: SuSE 7.2 PHP version: 4.3.0RC2 PHP Bug Type: Apache2 related Bug description: Default for AcceptPathInfo "changed"
Maybe this is more of a feature request, but here it goes: New in Apache 2 is the possibility to turn off PATH_INFO, which was always on in Apache 1. According to the Apache docs, the _default_ value for AcceptPathInfo is given by the module used to handle a script (rather than being globally on or off). For PHP the default is off rather than on, and this breaks old scripts unless AcceptPathInfo is turned on in httpd.conf. It seems reasonable to have the old behavior be the default, rather than a behavior which potentially breaks old scripts without affecting security one way or the other, and as far as I can see the default is dictated by PHP. I, of course, would know how to turn AcceptPathInfo on if I were using Apache 2, but it seems that the world is full of users who can't be bothered to read the documentation and then complain _to me_ about 404 errors. If I've missed something crucial, feel free to trout me. :-) -- Edit bug report at http://bugs.php.net/?id=20910&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=20910&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=20910&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=20910&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=20910&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=20910&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=20910&r=support Expected behavior: http://bugs.php.net/fix.php?id=20910&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=20910&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=20910&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=20910&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=20910&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=20910&r=dst IIS Stability: http://bugs.php.net/fix.php?id=20910&r=isapi