Return-Path: owner-new-httpd
Received: by taz.hyperreal.com (8.6.10/8.6.5) id XAA16232;
 Sat, 15 Apr 1995 23:48:59 -0700
Received: from paris.ics.uci.edu by taz.hyperreal.com (8.6.10/8.6.5) with SMTP
 id XAA16225; Sat, 15 Apr 1995 23:48:57 -0700
Received: from avron.ics.uci.edu by paris.ics.uci.edu id aa10205;
          15 Apr 95 23:45 PDT
To: new-httpd@hyperreal.com
Subject: IncludesNoExec
In-reply-to: Your message of "Sat, 15 Apr 1995 19:01:00 -0000."
             <m0s0C9W-0003p9C@cass39.ast.cam.ac.uk>
Date: Sat, 15 Apr 1995 23:45:53 -0700
From: "Roy T. Fielding" <fielding@avron.ICS.UCI.EDU>
Message-ID: <9504152345.aa10205@paris.ics.uci.edu>
Sender: owner-new-httpd@apache.org
Precedence: bulk
Reply-To: new-httpd@apache.org

>                                               Option value
>                                    Includes   IncludesNoExec  IncludesNoCMD*
> Current status:
>   #include virtual="/cgi-bin/script"   No         No              -
>   #exec cmd="./hack.pl"                Yes        No              -

Unless something has been changed, that's not right.  You should
never be able to use virtual="" to execute a CGI script.  Instead, the
current status is:

    #exec cgi="/cgi-bin/script"          No         No              -
    #exec cmd="./hack.pl"                Yes        No              -


.....Roy