Re: [gentoo-dev] News item: Apache "-D PHP5" needs update to "-D PHP"

[Lars Wendler]

Hi Sebastian,

to be honest I was very upset when I first stumbled upon this problem.
And yes I only found about it when my apache webserver started to
deliver php source code instead of the real sites.
Doing such a change without getting in contact with me as apache
maintainer before the change was done is very... eh... impolite at best.

Kind regards
Lars

On Mon, 4 Jan 2016 01:26:28 +0100 Sebastian Pipping wrote:

>Hi!
>
>
>Better late then never.  Posting 72 hours from now the earliest as
>advised by GLEP 42.  Feedback welcome as usual.
>
>
>===========================================================
>Title: Apache "-D PHP5" needs update to "-D PHP"
>Author: Sebastian Pipping <sping@g.o>
>Content-Type: text/plain
>Posted: 2016-01-04
>Revision: 1
>News-Item-Format: 1.0
>Display-If-Installed: app-eselect/eselect-php[apache2]
>
>With >=app-eselect/eselect-php-0.8.1, to enable PHP support
>for Apache 2.x file /etc/conf.d/apache2 no longer
>needs to read
>
>  APACHE2_OPTS="......... -D PHP5"
>
>but
>
>  APACHE2_OPTS="......... -D PHP"
>
>, i.e. without "5" at the end.  This change is related to
>unification in context of the advent of PHP 7.x.
>
>With that change, guard "<IfDefine PHP>" in file
>/etc/apache2/modules.d/70_mod_php.conf
>has a chance to actually pull in PHP support.
>
>Without updating APACHE2_OPTS, websites could end up serving
>PHP code (include configuration files with passwords)
>unprocessed to website visitors!
>
>
>The origin of this news item is:
>https://bugs.gentoo.org/show_bug.cgi?id=569042
>===========================================================
>
>
>Best
>
>
>
>Sebastian
>



-- 
Lars Wendler
Gentoo package maintainer
GPG: 21CC CF02 4586 0A07 ED93  9F68 498F E765 960E 9B39

Attention! New gpg key! See (self signed server cert for now)
http://www.gentoofan.org/blog/index.php?/archives/9-New-gpg-keys.html