nginx 0day exploit for nginx + fastcgi PHP

Cliff Wells cliff at develix.com
Sat May 22 04:57:14 MSD 2010


On Fri, 2010-05-21 at 10:48 -0700, Michael Shadle wrote:
> Default is zero.

Indeed.

I can't find a single installation of PHP (amongst about 35 virtual
servers I checked) where this option isn't commented out (so defaulting
to 0).

Is there some widely-used PHP application that requires this be on?

Cliff

-- 




More information about the nginx mailing list