Suggestion for the Options directive in Apache (fwd)

["Ralf S. Engelschall" <rs...@engelschall.com>]

----- Forwarded message from Mike Barcroft -----

Re: Suggestion for the Options directive in Apache (fwd)

[Marc Slemko <ma...@worldgate.com>]

On Tue, 2 Sep 1997, Lars Eilebrecht wrote:

> According to Marc Slemko:
> 
> >  Use IncludesNOEXEC and include virtual.  It doesn't quite work right yet,
> >  but it should.
> 
> Uhm, but if IncludesNOEXEC is given it is impossible to use include
> virtual to include a cgi script... and that was the intention of the
> guy who sent the mail, wasn't it? 

No it isn't.  Right now (well, last time I checked) you can use include
virtual to include something in a ScriptAliased directory, just not a CGI
setup with an AddHandler.  There is no reason IncludesNOEXEC should
prohibit including a document that would normally be executed as a CGI; it
should simply prohibit you from making anything else a CGI.

I think there was general agreement reached for changing the behavior so
IncludesNOEXEC worked with CGIs outside ScriptAlised directories, but I
never got around to it.

Re: Suggestion for the Options directive in Apache (fwd)

[Lars Eilebrecht <La...@unix-ag.uni-siegen.de>]

According to Marc Slemko:

>  Use IncludesNOEXEC and include virtual.  It doesn't quite work right yet,
>  but it should.

Uhm, but if IncludesNOEXEC is given it is impossible to use include
virtual to include a cgi script... and that was the intention of the
guy who sent the mail, wasn't it? 


ciao...
--
Lars Eilebrecht                       - Death is a nonmaskable interrupt.
sfx@unix-ag.org
http://www.si.unix-ag.org/~sfx/

Re: Suggestion for the Options directive in Apache (fwd)

[Marc Slemko <ma...@worldgate.com>]

Use IncludesNOEXEC and include virtual.  It doesn't quite work right yet,
but it should.

On Mon, 1 Sep 1997, Ralf S. Engelschall wrote:

> 
> ----- Forwarded message from Mike Barcroft -----
> >From vogon!mail.tct.net!mike  Thu Aug 21 00:18:18 1997
> Message-Id: <19...@mail.tct.net>
> From: "Mike Barcroft" <Mi...@mail.tct.net>
> Date: Wed, 20 Aug 1997 17:40:59 +0000
> Subject: Suggestion for the Options directive in Apache
> Reply-to: mike@tct.net
> 
> Hello Ralf,
> 
> I hope I'm sending this to the right programmer (your name seems to 
> be in the modules for this suggestion).  In the Apache HTTPd 
> server the "Options directive" has a option to allow includes and 
> disallow execution of cgi's or commands (IncludesNOEXEC).  I think a 
> option like IncludesNOCMD which would allow CGI's, but not commands, 
> would be a great addition for the next release of Apache HTTPd.
> 
> Best Regards,
> Mike Barcroft,
> mike@tct.net.
> ----- End of forwarded message from Mike Barcroft -----
> 
> not ack.
>                                        Ralf S. Engelschall
>                                        rse@engelschall.com
>                                        www.engelschall.com
>