Re: [cobalt-users] Re PHP Advisory - RaQ3

["Steve Werby" <steve-lists@xxxxxxxxxxxx>]

"Render-Vue" <sales@xxxxxxxxxxxxxx> wrote:
> What I want to know is we went to the PHP site and on this RaQ3 we have
> PHP4.0.4 now there is no mention of a security patch for that, there is

You can make the suggested modification to php.ini.  It's for 4.0.3 or
higher.

> Also noticed that on this machine in the usr/local/php we dont have a
> php.ini it's php.ini.dist or php.ini.optimised yet it still works on the
> server ???

You probably have php.ini in /etc/httpd/php.ini.  Look there or do a "locate
php.ini" to see if there's another copy elsewhere on the server.  Create a
web page with <?php phpinfo(); ?> in it, view it from a browser, and check
where PHP thinks php.ini should be (it's listed in the output of that page).

Then add "file_uploads = Off" (no quotes) to php.ini and restart Apache by
doing /etc/rc.d/init.d/httpd restart.

--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/