[PHP] Re: PHP Security Alert for Apache/Win32

2002-01-06 Thread Garth Dahlstrom
AFAIK, you need the ScriptAlias line in your httpd.conf if you are running PHP as a CGI... Safer to run it as an SAPI module if you can and remove that ScriptAlias line. -GED > "LaserJetter" > - Re: PHP Security Alert for Apache/Win32 > - Sun, 6 Jan 2002 20:16:39 - > > Can

[PHP] Re: PHP Security Alert for Apache/Win32

2002-01-06 Thread LaserJetter
Can you not just delete the ScriptAlias line? What does that line actually do apart from create an Alias? LJ "David" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Wow!, i tried it and it really works, this is serious man! is there a fix around it without saf

[PHP] Re: PHP Security Alert for Apache/Win32

2002-01-06 Thread David
Wow!, i tried it and it really works, this is serious man! is there a fix around it without safe mode like GED suggested? >Folks running Apache/Win32 should read this: > >http://www.securiteam.com/windowsntfocus/5ZP030U60U.html > >If you run in CGI mode you likely have a line similar to >the