httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From c...@decus.org (Rodent of Unusual Size)
Subject Re: [PATCH] for PR#189 (mod_info shows semi-stale config info)
Date Wed, 26 Feb 1997 01:49:03 GMT
>From the fingers of Marc Slemko flowed the following:
>
>How about adding a bit to this and to mod_status saying "oh, btw, anyone
>can add this anywhere they want in a .htaccess file"?
>
>Do that and resend your patch and, unless anyone objects, I will add it
>in.

    Okey, here it is.

>On Tue, 25 Feb 1997, Rodent of Unusual Size wrote:
>
>>     PR#189 points out (quite correctly) that mod_info does *not* display
>>     the current configuration info.  Rather, it draws some of the
>>     information from the current configuration, but draws the directive
>>     settings from the online configuration files.  This means that the
>>     display may not reflect reality if the files have been changed but
>>     the server has not yet been reloaded to use them.
>> 
>>     This patches the mod_info.html file to point this out, and also adds
>>     some links to other directives.
 
     #ken    :-)}

Index: mod_status.html
===================================================================
RCS file: /usr/users/coar/myApache/repository/apache/htdocs/manual/mod/mod_status.html,v
retrieving revision 1.3
diff -c -r1.3 mod_status.html
*** 1.3	1997/02/03 01:18:17
--- mod_status.html	1997/02/26 01:42:54
***************
*** 80,86 ****
  	AUX_CFLAGS= (something) -DSTATUS
  </pre>
  
  <!--#include virtual="footer.html" -->
  </BODY>
  </HTML>
- 
--- 80,94 ----
  	AUX_CFLAGS= (something) -DSTATUS
  </pre>
  
+ <BLOCKQUOTE>
+  <STRONG>
+   It should be noted that if <SAMP>mod_status</SAMP> is compiled into
+   the server, its handler capability is available in <EM>all</EM>
+   configuration files, including <EM>per</EM>-directory files
+   (<EM>e.g.</EM>, <SAMP>.htaccess</SAMP>).  This may have
+   security-related ramifications for your site.
+  </STRONG>
+ </BLOCKQUOTE>
  <!--#include virtual="footer.html" -->
  </BODY>
  </HTML>

Index: mod_info.html
===================================================================
RCS file: /usr/users/coar/myApache/repository/apache/htdocs/manual/mod/mod_info.html,v
retrieving revision 1.2
diff -c -r1.2 mod_info.html
*** 1.2	1996/11/21 10:30:48
--- mod_info.html	1997/02/26 01:42:54
***************
*** 9,16 ****
  <h1>Module mod_info</h1>
  
  This module is contained in the <code>mod_info.c</code> file.  It
! provides a comprehensive overview of the current server configuration
! including all installed modules.  This module is not compiled into the
  server by default.  It is only available in Apache 1.1 and later. To
  enable it, add the following line to the server build Configuration
  file, and rebuild the server:
--- 9,17 ----
  <h1>Module mod_info</h1>
  
  This module is contained in the <code>mod_info.c</code> file.  It
! provides a comprehensive overview of the server configuration
! including all installed modules and directives in the configuration
! files.  This module is not compiled into the
  server by default.  It is only available in Apache 1.1 and later. To
  enable it, add the following line to the server build Configuration
  file, and rebuild the server:
***************
*** 29,40 ****
  &lt;/Location&gt;
  </PRE>
  
! You may wish to add a limit clause inside the location directive to limit
! access to your server configuration information.<p>
  Once configured, the server information is obtained by accessing
  <tt>http://your.host.dom/server-info</tt><p>
! 
  <!--#include virtual="footer.html" -->
  </BODY>
  </HTML>
- 
--- 30,66 ----
  &lt;/Location&gt;
  </PRE>
  
! You may wish to add a
! <A
!  HREF="core.html#limit"
! >&lt;Limit&gt;</A>
! clause inside the
! <A
!  HREF="core.html#location"
! >location</A>
! directive to limit access to your server configuration information.<p>
  Once configured, the server information is obtained by accessing
  <tt>http://your.host.dom/server-info</tt><p>
! <BLOCKQUOTE>
!  <STRONG>
!   Note that the configuration files are read by the module at run-time,
!   and therefore the display may <EM>not</EM> reflect the running
!   server's active configuration if the files have been changed since the
!   server was last reloaded.  Also, the configuration files must be
!   readable by the user as which the server is running (see the
!   <A
!    HREF="core.html#user"
!   ><SAMP>User</SAMP></A>
!   directive), or else the directive settings will not be listed.
!   <P>
!   It should also be noted that if <SAMP>mod_info</SAMP> is compiled into
!   the server, its handler capability is available in <EM>all</EM>
!   configuration files, including <EM>per</EM>-directory files
!   (<EM>e.g.</EM>, <SAMP>.htaccess</SAMP>).  This may have
!   security-related ramifications for your site.
!   </P>
!  </STRONG>
! </BLOCKQUOTE>
  <!--#include virtual="footer.html" -->
  </BODY>
  </HTML>

Mime
View raw message