RE: PHP5 / IIS5 /force-cgi-redirect issue - Sears, Patrick - com.mysql.lists.eventum-users

3 messages in com.mysql.lists.eventum-usersRE: PHP5 / IIS5 /force-cgi-redirect i...

From	Sent On	Attachments
Kipp Grose	16 Mar 2006 13:31
Sears, Patrick	16 Mar 2006 14:58
Kipp Grose	17 Mar 2006 08:05

Subject:	RE: PHP5 / IIS5 /force-cgi-redirect issue
From:	Sears, Patrick (pse...@PLANSYS.COM)
Date:	03/16/2006 02:58:25 PM
List:	com.mysql.lists.eventum-users

The following may be useful:

A post on the PHP Installation for Windows page regarding how to specify and set
the required environment variable: http://us3.php.net/manual/en/install.windows.php#53646

A PHP documentation page showing how to set the appropriate Apache handler: http://us3.php.net/manual/en/security.cgi-bin.force-redirect.php

As an aside, is there any particular reason you've compiled PHP as a CGI with
Apache? This whole problem is a consequence of that configuration; PHP goes
into super-secure mode when it is compiled as a CGI. I have had great success
and stability running PHP as a module to Apache for quite some time without any
problems. So far as I am aware, DotProject does not require PHP to be a CGI
binary, so I don't think that using it as a module would be a problem.

-----Original Message----- From: Kipp Grose [mailto:k.gr...@claimsecure.com] Sent: Thursday, March 16, 2006 4:32 PM To: even...@lists.mysql.com Subject: PHP5 / IIS5 /force-cgi-redirect issue

Hi All:

A few months back, we ran a pilot project with Eventum 1.6.1 under PHP4 / IIS5 / Win2k. It was a success and I've been given the go ahead to setup a production Eventum system now.

The new environment I find myself in is Eventum 1.7 under PHP5.1.2 / IIS 5.1 / Win2k. This environment is already hosting DotProject ( <http://dotproject.net> http://dotproject.net) successfully, so it's a solid PHP/IIS/MYSQL configuration.

Unfortunately, I did not get very far before I hit a wall: Immediately after I've unzipped the Eventum 1.7 files and I attempt to run /setup/index.php I get this canned PHP error:

"This PHP CGI binary was compiled with force-cgi-redirect enabled. This means that a page will only be served up if the REDIRECT_STATUS CGI variable is set, e.g. via an Apache Action directive. For more information as to why this behaviour exists, see the <a href="http://php.net/security.cgi-bin">manual page for CGI security</a>. For more information about changing this behaviour or re-enabling this webserver, consult the installation file that came with this distribution, or visit <a href="http://php.net/install.windows">the manual page</a>."

I've researched the whole PHP force_redirect issue under IIS, but nothing I've read has got me past this error. I'm wondering why I've never seen this on my last installation and why this isn't a problem for our DotProject installation, only Eventum. I'm suspecting that running PHP 5 instead of 4.x is somehow part of the problem. If anyone recognizes what's going on here, I would be most obliged for your assistance. Cheers,