You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2003/08/21 10:26:09 UTC
DO NOT REPLY [Bug 22618] New: -
MultiViews invalidates PATH_TRANSLATED if cgi-wrapper is used
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=22618>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
INSERTED IN THE BUG DATABASE.
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=22618
MultiViews invalidates PATH_TRANSLATED if cgi-wrapper is used
Summary: MultiViews invalidates PATH_TRANSLATED if cgi-wrapper is
used
Product: Apache httpd-1.3
Version: 1.3.28
Platform: All
OS/Version: Solaris
Status: NEW
Severity: Major
Priority: Other
Component: mod_cgi
AssignedTo: bugs@httpd.apache.org
ReportedBy: makler+bugs@man.torun.pl
Because of ap_sub_req_lookup_uri() call in ap_add_cgi_vars() of src/main/util_script.c (around line 430),
the PATH_TRANSLATED variable could be wrong under the following circumstances:
1. MultiViews is enabled for the user directory
2. In the user directory there is any file beginning with the username (e.g. username.css, username.php etc.)
3. In the httpd.conf there is the following configuration:
AddHandler cgi-wrapper .php or AddHandler cgi-wrapper .cgi
Action cgi-wrapper /cgi-bin/cgiwrap/username
Then if I call from the browser:
http://www.virtual.example.com/subdir/script.php
the PATH_TRANSLATED is:
/user/home/dir/public_html/username.css/subdir/script.php
which is of course WRONG.
You can disable -MultiViews, but it is not what is desired. It should look for script alternatives.
It should look for alternatives of /user/home/dir/public_html/subdir/script.php
and not for alternative version of /user/home/dir/public_html/username
I do not how this could be done, since Apache does not know that the first path part
is the username etc.
Because of this bug one can not use PHP with cgi-wrapper (since PHP uses now PATH_TRANSLATED
when looking for script to run) IF MultiViews is enabled.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org