[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#296590: marked as done (apache2: cgi SCRIPT_PATH broken)

Your message dated Thu, 5 Jul 2007 01:11:15 +0200
with message-id <200707050111.20354.sf@sfritsch.de>
and subject line #296590 apache2: cgi SCRIPT_PATH broken
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message --- 
package: apache2
severity: important

When a request to a cgi script contains double slashes in the trailing URI
component after the script name, the cgi environment variable is not set
correctly. Tried on a (woody) apache 1.3 installation too, it works fine
there.
This severely affects automated URL creation from within cgi scripts.

Create an executable script in an apache2 cgi-bin directory with this
content, e.g. as 'scriptname':

------
#!/bin/sh

echo 'Content-Type: text/plain'
echo
echo 'script_name: ' $SCRIPT_NAME
echo 'path_info: ' $PATH_INFO
------

Browse to the http://servername/cgi-bin/scriptname/abc/def/g URL, output
is as expected:

------
script_name:  /cgi-bin/scriptname
path_info:  /abc/def/g
------

Now browse to http://servername/cgi-bin/scriptname/abc/def//g and the
abc/def component is wrongly added to SCRIPT_PATH:

------
script_name:  /cgi-bin/scriptname/abc/def
path_info:  /abc/def/g
------

PATH_INFO is right in both cases.


Regards,

Filip

-- 
"I feel like Microsoft is mostly unaware that their products are used in
 the real world."
	-- Jason Coombs on Microsoft product security

--- End Message ---
--- Begin Message --- 
Version: 2.2.3-1

I can't reproduce this with 2.2.4. I will assume it was fixed with 
2.2.x and close the bug.

Attachment: signature.asc
Description: This is a digitally signed message part.


--- End Message ---
Reply to: