www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From m...@apache.org
Subject Re: mod_include/3184: <!--#exec cmd="/path/cmd" is not a subject of any restrictions (<Directory> etc)
Date Mon, 12 Oct 1998 06:52:19 GMT
[In order for any reply to be added to the PR database, ]
[you need to include <apbugs@Apache.Org> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.                                      ]
[Reply only with text; DO NOT SEND ATTACHMENTS!         ]


Synopsis: <!--#exec cmd="/path/cmd" is not a subject of any restrictions (<Directory>
etc)

State-Changed-From-To: open-closed
State-Changed-By: marc
State-Changed-When: Sun Oct 11 23:52:18 PDT 1998
State-Changed-Why:
If you don't want people to be able to execute things
from SSIs, use "Options IncludesNoEXEC".  They can still
use include virtual to execute CGIs from ScriptAliased
directories since htat isn't really calling a CGI, but 
just calling an arbitrary document that already is treated
as a CGI


Mime
View raw message