From: [EMAIL PROTECTED] Operating system: BSD/OS PHP version: 4.3.0 PHP Bug Type: Apache related Bug description: enable-force-cgi-redirect doesnot work
I use PHP as CGI with Apache 1.3.27. I compiled PHP with --safe-mode and --enable-force-cgi-redirect (minimal config to verify the problem). When I access php like http://domain.com/cgi-bin/php the "enable-force-cgi-redirect" works fine BUT when I aceess http://domain.com/test.php and test.php does NOT exist I get "No input file specified" and of course you may then pass parameters and the rest is known. ie http://www.domain.com/test.php?/etc/passwd returns the password file. In exactly the same setups I never had problems with prior versions of PHP. Also in the virual hosts in apache conf I have: ScriptAlias /cgi-bin/ /home/domain/cgi-bin/ but this was always like this. The same compilation with PHP 4.3 RC2 and before and there was no problem Thank you in advance Kosmas Skiadopoulos -- Edit bug report at http://bugs.php.net/?id=21884&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=21884&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=21884&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=21884&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=21884&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=21884&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=21884&r=support Expected behavior: http://bugs.php.net/fix.php?id=21884&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=21884&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=21884&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=21884&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=21884&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=21884&r=dst IIS Stability: http://bugs.php.net/fix.php?id=21884&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=21884&r=gnused
