chxo internets RSS

A network of memes,
by Chris Snyder

See also
CHXO Internet
twitter.com/64

Archive

Sep
1st
Wed
permalink

Beware of the default Apache 2 config for PHP

Ilia Alshanetsky points out that AddHandler is the wrong directive to use for executable file types like PHP, because Apache could execute the file bad.php.jpeg (I haven’t tested this yet, but plan to).

The safer directive is apparently AddType:

AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps