PDA

View Full Version : Problem accessing menus


bfreas
6th of October 2006 (Fri), 11:36
When I try to access the "daily|setup|all|hide" menus I get an error page stating:

Security Alert! The PHP CGI cannot be accessed directly. This PHP CGI binary was compiled with force-cgi-redirect enabled. This means that a page will only be served up if the REDIRECT_STATUS CGI variable is set, e.g. via an Apache Action directive.
For more information as to why this behaviour exists, see the manual page for CGI security (http://php.net/security.cgi-bin).
For more information about changing this behaviour or re-enabling this webserver, consult the installation file that came with this distribution, or visit the manual page.

I'm not exactly a PHP expert (far from it). What can I do to resolve this? Everything else seems to have gone smoothly with the upgrade.
(http://gallery.freas.net/admin/EDITOR_powertools.php?exhibition=2&ee_lang=eng&menustate=3)

Pekka
6th of October 2006 (Fri), 11:57
That's new to me. Those menus redirect to current page (to avoid resubmit of some editor pages). Apparently CGI version of PHP things this is some kind of attack. There is info and discussion about it in http://fi.php.net/security.cgi-bin and I think your server admin should be able to sort it out.

Pekka
6th of October 2006 (Fri), 12:00
As a temporary fix change in admin/SCRIPT_menu.php line 25 from

@header("Location: {$scripturl}?ee_lang={$ee_lang}&exhibition={$exhibition}");

to

//@header("Location: {$scripturl}?ee_lang={$ee_lang}&exhibition={$exhibition}");

bfreas
6th of October 2006 (Fri), 14:57
Thanks Pekka, that seems to have fixed it. Should I still contact my server admin about this? Is there anything that won't work if I just leave the modified code as is?

Pekka
6th of October 2006 (Fri), 19:32
With that line commented your current page's form will be resubmitted, but that it is not a bad thing, just slower. But it happens only when you change menu type.

You could still put a support ticket about it and see what happens.