Remove SERVER_NAME var because of lighttpd bug

lighttpd suffers from the same same bug/feature apache does, it fills
SERVER_NAME in with the requested URL if connonical names and server
side server name is not configured.  No thanks.

Nginx seems to have secure defaults.
This commit is contained in:
diginc
2016-06-28 12:13:03 -05:00
parent 8ce2c28919
commit 5d0a399796
2 changed files with 0 additions and 2 deletions

View File

@@ -14,7 +14,6 @@ if(!isset($_POST['domain'], $_POST['list'], $_POST['token'])) {
$SERVER_SIDE_IDS = [
$_SERVER['SERVER_ADDR'],
$_SERVER['SERVER_NAME'],
'pi.hole'
];