I installed lighttpd with fast-cgi. Then I installed webmin. It appears webmin has taken over the lighttpd install and changed the PHP configuration to add a bunch of their own environment variables that I really do not want exposed to regular websites running on the server. For example:
Surfing up to http:///index.php and printing out phpinfo()
DOCUMENT_REALROOT /usr/libexec/webmin
DOCUMENT_ROOT /usr/libexec/webmin
SERVER_REALROOT /usr/libexec/webmin
HTTP_REFERER https://<SERVERIP>:10000/init/edit_action.cgi?0+lighttpd
QUERY_STRING file=%2Fetc%2Frc%2Ed%2Finit%2Ed%2Flighttpd&name=lighttpd&restart=1&back=edit%5Faction%2Ecgi%3F0%2Blighttpd
So basically, my question is how to get webmin out of the regular lighttpd port 80 configuration and only have it stick all that stuff in if you actually surf up to the webmin port 10000. Specifically, HTTP_REFERER and QUERY_STRING are giving me trouble because those are used for stats and configurations.