Return-Path: <new-httpd-owner-new-httpd-archive=hyperreal.org@apache.org>
Delivered-To: new-httpd-archive@hyperreal.org
Received: (qmail 29035 invoked by uid 6000); 3 Jul 1998 23:01:39 -0000
Received: (qmail 29021 invoked from network); 3 Jul 1998 23:01:38 -0000
Received: from valis.worldgate.com (marcs@198.161.84.2)
  by taz.hyperreal.org with SMTP; 3 Jul 1998 23:01:38 -0000
Received: from localhost (marcs@localhost)
	by valis.worldgate.com (8.8.7/8.8.7) with SMTP id RAA14935;
	Fri, 3 Jul 1998 17:01:37 -0600 (MDT)
Date: Fri, 3 Jul 1998 17:01:36 -0600 (MDT)
From: Marc Slemko <marcs@worldgate.com>
To: new-httpd@apache.org
cc: apache-1.3-cvs@hyperreal.org
Subject: Re: cvs commit: apache-1.3/src/main http_core.c
In-Reply-To: <19980703200602.26181.qmail@hyperreal.org>
Message-ID: <Pine.BSF.3.95q.980703170044.8955B-100000@valis.worldgate.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: new-httpd-owner@apache.org
Precedence: bulk
Reply-To: new-httpd@apache.org

On 3 Jul 1998 coar@hyperreal.org wrote:

> coar        98/07/03 13:06:02
> 
>   Modified:    src      CHANGES
>                src/main http_core.c
>   Log:
>   	Fix <Limit> parsing; "GET" and "get" are distinct methods.

Note that this introduces a security problem in that many users use
something other than the uppercase method name in their config files.
Previously it worked; this will magically stop authentication from being
required for them.  That is bad.