php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #20910 Default for AcceptPathInfo "changed"
Submitted: 2002-12-09 11:10 UTC Modified: 2003-01-15 13:43 UTC
From: carl at thep dot lu dot se Assigned:
Status: Not a bug Package: Apache2 related
PHP Version: 4.3.0RC2 OS: SuSE 7.2
Private report: No CVE-ID: None
View Add Comment Developer Edit
 [2002-12-09 11:10 UTC] carl at thep dot lu dot se 
Maybe this is more of a feature request, but here it goes:
New in Apache 2 is the possibility to turn off PATH_INFO,
which was always on in Apache 1. According to the Apache
docs, the _default_ value for AcceptPathInfo is given by the
module used to handle a script (rather than being globally
on or off). For PHP the default is off rather than on, and this
breaks old scripts unless AcceptPathInfo is turned on in httpd.conf.
It seems reasonable to have the old behavior be the default,
rather than a behavior which potentially breaks old scripts without
affecting security one way or the other, and as far as I can see
the default is dictated by PHP.
 
I, of course, would know how to turn AcceptPathInfo on if I were
using Apache 2, but it seems that the world is full of users who
can't be bothered to read the documentation and then complain
_to me_ about 404 errors.

If I've missed something crucial, feel free to trout me. :-)

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2003-01-15 13:43 UTC] iliaa@php.net 
Sorry, but your problem does not imply a bug in PHP itself.  For a
list of more appropriate places to ask for help using PHP, please
visit http://www.php.net/support.php as this bug system is not the
appropriate forum for asking support questions. 

Thank you for your interest in PHP.

My apache 1.X does not have PATH_INFO avaliable, so it is not just Apache 2 where it may not avaliable. Generally, if you a rellying on any enviroment variables you should ALWAYS checks for their avaliablity before blindly using them.
If the user/admin feel this feature is import surely they can enable it via httpd.conf, I don't see PHP should try to force this setting to ON.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu May 23 06:01:35 2024 UTC