[CentOS] php config security concern for c5

John R Pierce pierce at hogranch.com
Sun Nov 15 20:26:08 UTC 2009

Joe Pruett wrote:
> a fix is to replace two lines in /etc/httpd/conf.d/php.conf:
> AddHandler php5-script .php
> AddType text/html .php

what about other AddHandlers ?   

for instance,

    AddHandler cgi-script .cgi

    AddHandler type-map var

I had both of these on my server, and just now replaced them with 
similar <FilesMatch...> sections.

More information about the CentOS mailing list