httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rob Hartill <>
Subject Re: putting the log_reason information in the error message
Date Mon, 16 Sep 1996 19:17:07 GMT
sameer wrote:
>> He said it would be a CGI variable. It's up to the CGI/SSI if it gets
>> shown to the user or not. In that format, I think it would be a good
>> idea.
>	The patch I submitted (did it show up? I sent it from my
>laptop, which is acting odd these days) actually did add the text to
>the error message as well. Mark makes a good point about a need to
>turn that off, so putting it just as a CGI variable is probably the
>right thing.

Yes that's bad for other reasons too, e.g. giving away information
about the filesystem structure.

  "Sorry /.secret/.passwords/external_users not found"

View raw message