I tested scanner and now it really handless shebang lines itself without CGI. So the cgi.enable_shebang_line and corresponding code can be safely removed. However we still need to handle "not found"/"access denied" cases and respond with 404/403.

Thanks. Dmitry.

Stanislav Malyshev wrote:
Hi!

It's great. So it's nothing to do in the scanner.
I can just change the CGI code.

Note that if there's shebang enabled, there could be options in the command line. And then CGI/CLI would have to process them, I guess.

--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to