You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Randy Terbush <ra...@zyzzyva.com> on 1997/01/09 18:19:24 UTC

Re: nph- deprecation

> 
> 	Because of the dangers of nph-, as described here earlier,
> I proposed:
> 
> 1) an option to disable nph: NphDisable
> 2) making my unbuffered cgi patch a "supported patch"
> 
> 	Should I work on this? I'd like to let people avoid the nph-
> security problem, and deprecating nph- has always been one of my
> goals.
> 
> 	I do think #1 is worth going into the beta, because it is a
> security thing. #2 is too iffy/featurish to put in right now.

Since we are trying to depricate nph-, I would suggest that the
option become 'NPHEnable', with the default being "disabled".

I apparently have missed item #2.