From owner-freebsd-ports Sat Jun 14 12:16:28 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id MAA04590 for ports-outgoing; Sat, 14 Jun 1997 12:16:28 -0700 (PDT) Received: from misery.sdf.com (misery.sdf.com [204.244.210.193]) by hub.freebsd.org (8.8.5/8.8.5) with SMTP id MAA04576; Sat, 14 Jun 1997 12:16:21 -0700 (PDT) Received: from tom by misery.sdf.com with smtp (Exim 1.62 #1) id 0wcyGt-0001qS-00; Sat, 14 Jun 1997 12:13:59 -0700 Date: Sat, 14 Jun 1997 12:13:59 -0700 (PDT) From: Tom Samplonius To: Andreas Klemm cc: ache@freebsd.org, ports@freebsd.org Subject: Re: apache port and http://www.vex.net/php/ In-Reply-To: <19970614184643.55229@klemm.gtn.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ports@freebsd.org X-Loop: FreeBSD.org Precedence: bulk On Sat, 14 Jun 1997, Andreas Klemm wrote: ... > Although I'm nearly finished with the port as stand alone cgi > program, I'd like to follow the suggestions of the author, to run > it as an apache module. There are some security problems with the cgi module. It should only be used as last resort. I would recommend that the cgi php module be NOT included into the ports collection, lest someone have their system broken into, because of it. The apache module is avoids this problem. There was some discussion about the security problems with the cgi module on the postgresql mailing list. Also, if included as port, which database would php be built for? Wouldn't you need to make two ports? One for php-postresql and one for php-msql? ... > -- > Andreas Klemm | klemm.gtn.com - powered by > Symmetric MultiProcessor FreeBSD > http://www.freebsd.org/~fsmp/SMP/SMP.html > http://www.freebsd.org/~fsmp/SMP/benches.html > > Tom