When are CGI settings required for a wordpress install?

  • Hello,

    I have a general question about the appropiate settings for a good wordpress install.
    My hosting gives an option to check CGI or FAST-CGI. I’m not sure if and when I have to check these options. I would like to know the following.

    • If it is not mentioned specifically in the requirements of a plugin; should I have CGI set?
    • Is it better to use any type of CGI for server settings?
    • Are there security dangers if CGI settings are enabled on a server?
    • where can you find the appropiate CGI settings for themes and plugins?
Viewing 1 replies (of 1 total)

  • When are CGI settings required for a wordpress install?

    Never by WordPress itself.

    WordPress just requires PHP and a webserver.

    PHP under Apache can run in several modes, including Apache’s own mod_php (DSO), suPHP, CGI, FastCGI (FPM or FCGI daemon), LSAPI, etc. These are called “PHP handlers”, and are alternative ways to run PHP, and not to be seen as a feature to enable/disable.

    Take a look at this page for a quick overview of the differences: https://chriswiegman.com/2011/10/fastcgi-vs-suphp-vs-cgi-vs-mod_php-dso/

    And if your host runs cPanel/WHM, take a look at this page for the options and their implications, but note that the performance and security factors mentioned there are more for the overall server (ie hosting company), and not necessarily for individual sites.

    WordPress doesn’t care what handler you use, as long as PHP runs and there are no weird permission issues. And in my 16+ years of managing WordPress sites, I’ve never encountered a single theme or plugin that required any specific handler. (I’m not saying such themes and plugins don’t exist, just that I’ve never encountered one before.)

Viewing 1 replies (of 1 total)
  • The topic ‘When are CGI settings required for a wordpress install?’ is closed to new replies.