httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Eric Covener <cove...@gmail.com>
Subject Re: [users@httpd] Running script CGI with IncludesNOEXEC
Date Wed, 18 Jan 2012 15:24:54 GMT
On Fri, Jan 13, 2012 at 3:54 AM, Petr Hracek <phracek2@gmail.com> wrote:
> Dear user,
>
> I have a question.
> I need to run from my page CGI script but in the /var/log/apache2/error_log
> I see:
> [Fri Jan 13 10:12:45 2012] [error] [client 10.7.254.58] unable to
> include potential exec "./testdiag.cgi" in parsed file
> /opt/apache2/htdocs/index.shtml.en_US

I think the doc is wrong/misleading and IncludesNoExec stops
"#include virtual" of CGI scripts in a roundabout way.


>
> in the configuration file is mentioned:
> <Directory /opt/apache2/htdocs/>
>    Options IncludesNOEXEC -MultiViews -FollowSymLinks
>    Order deny,allow
>    Allow from all
> </Directory>
>
> AddHandler cgi-script .cgi
> AddHandler server-parsed .shtml
> <FilesMatch "\.(cgi|cgi.en_US|cgi.de)$">
>    Options +ExecCGI -MultiViews -FollowSymLinks
> </FilesMatch>
>
> in the apache2 documentation is mentioned:
> IncludesNOEXEC
>    Server-side includes are permitted, but the #exec cmd and #exec
> cgi are disabled. It is still possible to #include virtual CGI scripts
> from ScriptAliased directories.
>
> How to do that so that CGI script will work
> My CGI  script has of course permissions 750
>
>
> --
> Best Regards / S pozdravem
> Petr Hracek
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>



-- 
Eric Covener
covener@gmail.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message