Re: Possible release note for systems running PHP through CGI.
On Tue, Aug 21, 2012 at 9:38 AM, Konstantin Khomoutov
<flatworm@users.sourceforge.net> wrote:
> On Tue, Aug 21, 2012 at 09:07:59AM +0200, Ondřej Surý wrote:
>
> [...]
>>> Maybe add just a small paragraph that the configuration of the
>>> extensions has changed and php users should read the NEWS file?
>>
>> That's probably sensible approach. I have quickly drafted short
>> paragraph which can be used for release notes:
>>
>> Default PHP extension configuration
>> -----------------------------------
>>
>> The mime-types package has dropped non-standard definitions of
>> PHP MIME-Types as a security measure. Default PHP configuration
>> for libapache2-mod-php5{filter} and php5-cgi now only serve files
>> which have .php, .php[345] and .phtml extensions on a most right
>> place as opposed to previous state where <filename>.php.foobar
>> would have been interpreted. Please read NEWS file in the PHP
>> SAPI of your choice for further information.
>
> I fail to parse that "on a most right place" bit though I'm not a native
> speaker. If you meant that those extension specifications form a minimal
> sane and safe subset, may be just go ahead and write exactly that. ;-)
Nope I mean that the extension should be last.
E.g. index.blah.php, but not index.php.blah.
O.
--
Ondřej Surý <ondrej@sury.org>
Reply to: