Microsoft Releases IIS FastCGI Module

Marcy writes "Microsoft has just announced the final release of the IIS FastCGI module for IIS 5.1 (XP), 6 (2003), and 7 (2008). This FastCGI module was built with collaboration from Zend, the creators of PHP, and is intended to solve the CGI on Windows problem." It's free as in beer.

Comments

Security

[melonman]

Great, so now I get the legendary security of IISS coupled with the legendary security of PHP? To be fair, it shouldn't be much worse than PHP/Apache, since the most common PHP setup effectively disables user-based access control and lets any PHP script anywhere on the server access any data created by any other PHP script anywhere on the server.

I do hope they've kept that thing where you install a new PHP application and then try to run the admin.php script via the web server as nobody before anyone else on the Internet does. That's a race condition implemented with real vision if ever I saw one. The more I think about it, the more it seems to me that Windows and PHP deserve each other.