You are viewing a plain text version of this content. The canonical link for it is here.
Posted to apache-bugdb@apache.org by William Beegle <be...@psc.edu> on 1998/01/27 20:57:57 UTC
config/1735: Files in cgi-bin displayed instead of executed in 1.2.5
>Number: 1735
>Category: config
>Synopsis: Files in cgi-bin displayed instead of executed in 1.2.5
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: apache
>State: open
>Class: sw-bug
>Submitter-Id: apache
>Arrival-Date: Tue Jan 27 13:10:00 PST 1998
>Last-Modified:
>Originator: beegle@psc.edu
>Organization:
apache
>Release: 1.2.5
>Environment:
uname -a says:
NetBSD sport.psc.edu 1.3 NetBSD 1.3 (SPORT) #1: Fri Jan 16 15:15:45 EST 1998 ksulliva@pit.psc.edu:/usr/src/sys/arch/i386/compile/SPORT i386
Standard configuration with AFS (a much-improved NFS) added. Nothing is in AFS
though, so that's probably not an issue.
>Description:
In srm.conf, I have:
DocumentRoot /var/gnats/www
ScriptAlias /cgi-bin/ /var/gnats/www/cgi-bin
If I try to access a file in /var/gnats/www/cgi-bin, the file is displayed
by the web browser rather than executed.
The access_log shows:
128.182.61.58 - - [27/Jan/1998:14:15:59 -0500] "GET /cgi-bin/pr.pl HTTP/1.0" 200
45154
There's nothing in error_log.
>How-To-Repeat:
The URL's http://sport.psc.edu:6666/cgi-bin/pr.pl
but ther's a firewall, so you won't be able to check it.
>Fix:
I'm guessing that the server is looking at the DocumentRoot before it looks at
the ScriptAlias. If there was a way to check the ScriptAlias first, that might
fix things.
%0
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <ap...@Apache.Org> in the Cc line ]
[and leave the subject line UNCHANGED. This is not done]
[automatically because of the potential for mail loops. ]