Topic: HTTP Error 403 - Forbidden

[evilren]

Hi I have working with that guide

http://www.wietseveenstra.nl/files/tutorials/AMPPR%20installation.pdf

When I try to get to http://localhost/phpinfo.php I get the HTTP Error 403 - Forbidden error

error log show this
------------------------------------------------------------------------------------
[Wed Apr 08 00:36:54 2009] [notice] Apache/2.2.11 (Win32) configured -- resuming normal operations
[Wed Apr 08 00:36:54 2009] [notice] Server built: Dec 10 2008 00:10:06
[Wed Apr 08 00:36:54 2009] [notice] Parent: Created child process 2056
[Wed Apr 08 00:36:54 2009] [notice] Child 2056: Child process is running
[Wed Apr 08 00:36:55 2009] [notice] Child 1064: Released the start mutex
[Wed Apr 08 00:36:55 2009] [notice] Child 2056: Acquired the start mutex.
[Wed Apr 08 00:36:55 2009] [notice] Child 2056: Starting 64 worker threads.
[Wed Apr 08 00:36:55 2009] [notice] Child 2056: Starting thread to listen on port 80.
[Wed Apr 08 00:36:56 2009] [notice] Child 1064: All worker threads have exited.
[Wed Apr 08 00:36:56 2009] [notice] Child 1064: Child process is exiting
[Wed Apr 08 00:37:25 2009] [error] [client 127.0.0.1] Invalid URI in request GET /phpinfo.php HTTP/1.1, referer: http://localhost/
[Wed Apr 08 00:37:27 2009] [error] [client 127.0.0.1] Invalid URI in request GET /phpinfo.php HTTP/1.1

-------------------------------------------------------------------------------------

I have added this part at the end of the httpd file just like the guide said,
in a clean area.

<Directory "c:/php/">
AllowOverride None
Options None
Order allow,deny
Allow from all
</Directory>
ScriptAlias /php/ “c:/php/”
AddType application/x-httpd-php .php
Action application/x-httpd-php “/php/php-cgi.exe”
SetEnv PHPRC “C:/php”

[acid.-.burn]

you might have to add in the Options
Sorry Edit { Options +ExecCGI }
i might be wrong but you are runing is as a cgi
& the php flile will not be in http://localhost/phpinfo.php
it will be in http://localhost/php/phpinfo.php
i do not know that is how perl is done so i would guess same will apply to php why not just run as a module ?

[glsmith]

hmmmm ... is it just me or are you exposing PHP itself to the public. This has got to be dangerous somehow someway.

For instance, if your php.ini file is in c:\php I could learn something about your setup by going to http://your.domain.com/php/php.ini , which if I was of the type, would figure a way to use it to my advantage and your disadvantage.

I would create a script alias to somewhere other than your actual PHP directory and drop my filename.php files there. Of course, I may be wrong too? I personally wouldn't expose perl in this manner! Second opinions?

Alias /php/ "c:/anywhere_but_php_root/php-bin/"
<Directory "c:/anywhere_but_php_root/php-bin/">
AllowOverride None
Options ExecCGI
Order allow,deny
Allow from all
</Directory>

I also notice a mixture of cute quotes “” vs. standard "" .. use just standard.

[evilren]