Hi, I have a tricky situation. I had PHP4.05, MySQL 3.23.38 installed on Win2000 pro using IIS5.0. But then I wanted to use the portal program phpWebsite, unfortunately this uses the crypt() function which was not compiled in PHP 4.05 (win32). Therefore I installed PHP 4.07 CGI (dev) with crypt() support. However when using PHP pages I get the following error message: ------------------------------------------------------------------- Security Alert! PHP CGI cannot be accessed directly. This PHP CGI binary was compiled with force-cgi-redirect enabled. This means that a page will only be served up if the REDIRECT_STATUS CGI variable is set. This variable is set, for example, by Apache's Action directive redirect. You may disable this restriction by recompiling the PHP binary with the --disable-force-cgi-redirect switch. If you do this and you have your PHP CGI binary accessible somewhere in your web tree, people will be able to circumvent .htaccess security by loading files through the PHP parser. A good way around this is to define doc_root in your php.ini file to something other than your top-level DOCUMENT_ROOT. This way you can separate the part of your web space which uses PHP from the normal part using .htaccess security. If you do not have any .htaccess restrictions anywhere on your site you can leave doc_root undefined. ------------------------------------------------------------------- Is there a workaround for IIS, or does this compiled PHP version requires Apache webserver? Best regards, Marnix -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] To contact the list administrators, e-mail: [EMAIL PROTECTED]
