3 ms·
Jesus shit on a stick. That's two Apache directives, nothing to do with PHP directly. You likely already have the ServerName entry, as 99.9% of apache installs
by stephenr 10y ago
Jesus shit on a stick.
That's two Apache directives, nothing to do with PHP directly.
You likely already have the ServerName entry, as 99.9% of apache installs would be using Vhosts these days.
The `UseCanonicalName = On` should be added to your vhost config file, or your global apache config file (e.g. /etc/apache2/apache2.conf on Debian)
- DougN7 10y agoSo, I' probably one of two people in the world that run PHP on IIS. Does that mean my website is not vulnerable?
- stephenr 10y agoNot necessarily. It depends how IIS is configured, I believe it will exhibit the same behaviour (SERVER_NAME is taken from the Host request header) in at least some circumstances, if not all.