I have working FastCGI PHP inside Apache using mod_fcgid. But I noticed that PHP scripts are executed even without .php suffix specified.
Eg: if file is mail.php
then http://example.com/mail.php
and http://example.com/mail
returns same output of PHP file mail.php
Is this common behaviour? And should be this (execution without suffix) disabled?
my Apache configuration is:
AddHandler fcgid-script .php
<Directory "{WwwRoot}">
Options -Indexes MultiViews FollowSymLinks +ExecCGI
FCGIWrapper {ConfigsRoot}/fcgi-php5 .php
Order allow,deny
allow from all
</Directory>
with simple wrapper
#!/bin/sh
PHP_FCGI_CHILDREN=3
export PHP_FCGI_CHILDREN
PHP_FCGI_MAX_REQUESTS=2000
export PHP_FCGI_MAX_REQUESTS
/usr/bin/php5-cgi
Thanks.