You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Randy Terbush <ra...@zyzzyva.com> on 1997/01/09 18:19:24 UTC
Re: nph- deprecation
>
> Because of the dangers of nph-, as described here earlier,
> I proposed:
>
> 1) an option to disable nph: NphDisable
> 2) making my unbuffered cgi patch a "supported patch"
>
> Should I work on this? I'd like to let people avoid the nph-
> security problem, and deprecating nph- has always been one of my
> goals.
>
> I do think #1 is worth going into the beta, because it is a
> security thing. #2 is too iffy/featurish to put in right now.
Since we are trying to depricate nph-, I would suggest that the
option become 'NPHEnable', with the default being "disabled".
I apparently have missed item #2.