www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From William Beegle <bee...@psc.edu>
Subject config/1735: Files in cgi-bin displayed instead of executed in 1.2.5
Date Tue, 27 Jan 1998 19:57:57 GMT

>Number:         1735
>Category:       config
>Synopsis:       Files in cgi-bin displayed instead of executed in 1.2.5
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Tue Jan 27 13:10:00 PST 1998
>Last-Modified:
>Originator:     beegle@psc.edu
>Organization:
apache
>Release:        1.2.5
>Environment:
uname -a says:
NetBSD sport.psc.edu 1.3 NetBSD 1.3 (SPORT) #1: Fri Jan 16 15:15:45 EST 1998     ksulliva@pit.psc.edu:/usr/src/sys/arch/i386/compile/SPORT
i386

Standard configuration with AFS (a much-improved NFS) added.  Nothing is in AFS
though, so that's probably not an issue.
>Description:
In srm.conf, I have:
DocumentRoot /var/gnats/www
ScriptAlias /cgi-bin/ /var/gnats/www/cgi-bin

If I try to access a file in /var/gnats/www/cgi-bin, the file is displayed
by the web browser rather than executed.

The access_log shows:
128.182.61.58 - - [27/Jan/1998:14:15:59 -0500] "GET /cgi-bin/pr.pl HTTP/1.0" 200
 45154

There's nothing in error_log.

>How-To-Repeat:
The URL's http://sport.psc.edu:6666/cgi-bin/pr.pl
but ther's a firewall, so you won't be able to check it.
>Fix:
I'm guessing that the server is looking at the DocumentRoot before it looks at
the ScriptAlias.  If there was a way to check the ScriptAlias first, that might
fix things.
%0
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <apbugs@Apache.Org> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]




Mime
View raw message