[PHP] Problems with PHP4 CGI binary

2001-02-28 Thread Philip Reynolds

Hi, 
I'm having problems with the PHP CGI binary (version 4.0.4pl1).
The bug is basically the bug reported here:
http://bugs.php.net/bugs.php?id=8506

It's exactly the same problem, replicated, now we need the CGI
binary version working, not only does this look very unprofessional
on the sites, but it means cookies cannot work.
This has been reported last December and it's a fairly serious
problem (basically makes the CGI binary close to unuseable for us)
Does anyone know of a fix, I tried messing around with Actions and
AddHandlers in Apache but to no avail.
Would anyone have an inkling as to what I might be doing wrong?
Or is it just a bug that needs to be fixed asap?
Phil.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




Re: [PHP] A small Q

2001-02-28 Thread Philip Reynolds

Harshdeep S Jawanda's [[EMAIL PROTECTED]] 20 lines of wisdom included:
:>Hi,
:>
:>Does the extension of files that are require()-d or include()-d in PHP
:>have to be ".inc"? Can it be ".php"?
:>
:>All examples seem to show this extension as ".inc". Could there be any
:>problems if the extension is kept ".php"?

No problems at all, only reason I would recommend a different
extension is that you can disallow the viewing of the included files
in apache with the extension ".inc" as follows:

Order allow,deny
Deny from all


Regards,
Phil.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




Re: [PHP] How to disable some functions?

2001-02-28 Thread Philip Reynolds

Batonik's [[EMAIL PROTECTED]] 15 lines of wisdom included:
:>Hi,
:>
:>  I've heard that it is possible, for security reasons, to disable
:>such functions like phpinfo(). How can I do this?

You can edit the sources... 
PHP4:   $PHP_BASE_DIR/ext/standard/basic_functions.c

You're looking for a struct called 
function_entry basic_functions[] 

On my version (4.0.4-pl1) it's on line 91.
Your functions are listed there..

for example, delete line "PHP_FE(time,  NULL)"
which is on line 100 on my version disables the time function.
However, why you want to disable functions is beyond me, to make PHP
"safe" you're going to have to disable a LOT of functions..

There might be some PHP4 way to disable functions, I think there
might be some way to do it from php.ini, but I can't find it
offhand.
Phil.


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]