Apache PHP and $_SERVER['PATH_INFO']

Ye' old general discussion board. Basically, for everything that isn't covered elsewhere. Come here to shoot the breeze, shoot your mouth off, or whatever suits your fancy.
This forum is not for asking programming related questions.

Moderator: General Moderators

Post Reply
kcomer
Forum Contributor
Posts: 108
Joined: Tue Aug 27, 2002 8:50 am

Apache PHP and $_SERVER['PATH_INFO']

Post by kcomer »

Is there a security risk invloved with allowing PHP to use the Apache PATH_INFO variable. I'm asking because I have a website at GoDaddy that I was trying to setup and it made extensive use of data in the $_SERVER['PATH_INFO'] variable. I google'd for a reason why you would want to disable PATH_INFO and didn't find anything. Can someone shed light on this? I'm still going to move the site, but I was curious as to why they had this feature disabled. And how they did it.

Keith
Post Reply