[CentOS] php config security concern for c5

John R Pierce pierce at hogranch.com
Sun Nov 15 20:26:08 UTC 2009


Joe Pruett wrote:
> a fix is to replace two lines in /etc/httpd/conf.d/php.conf:
>
> AddHandler php5-script .php
> AddType text/html .php
>   

what about other AddHandlers ?   

for instance,

    AddHandler cgi-script .cgi

    AddHandler type-map var


I had both of these on my server, and just now replaced them with 
similar <FilesMatch...> sections.





More information about the CentOS mailing list