I installed lighttpd with fast-cgi. Then I installed webmin. It appears webmin has taken over the lighttpd install and changed the PHP configuration to add a bunch of their own environment variables that I really do not want exposed to regular websites running on the server. For example:
Surfing up to http:///index.php and printing out phpinfo()
DOCUMENT_REALROOT /usr/libexec/webmin DOCUMENT_ROOT /usr/libexec/webmin SERVER_REALROOT /usr/libexec/webmin HTTP_REFERER https://<SERVERIP>:10000/init/edit_action.cgi?0+lighttpd QUERY_STRING file=%2Fetc%2Frc%2Ed%2Finit%2Ed%2Flighttpd&name=lighttpd&restart=1&back=edit%5Faction%2Ecgi%3F0%2Blighttpd
So basically, my question is how to get webmin out of the regular lighttpd port 80 configuration and only have it stick all that stuff in if you actually surf up to the webmin port 10000. Specifically, HTTP_REFERER and QUERY_STRING are giving me trouble because those are used for stats and configurations.