Received: (qmail 19104 invoked by uid 2012); 30 Dec 1999 14:21:33 -0000 Message-Id: <19991230142133.19103.qmail@hyperreal.org> Date: 30 Dec 1999 14:21:33 -0000 From: Michael Middleton Reply-To: michael.middleton@rz.uni-regensburg.de To: apbugs@hyperreal.org Subject: Design Bug in "Options Indexes" not in Apache/1.3.4 X-Send-Pr-Version: 3.2 >Number: 5520 >Category: general >Synopsis: Design Bug in "Options Indexes" not in Apache/1.3.4 >Confidential: no >Severity: non-critical >Priority: medium >Responsible: apache >State: closed >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Thu Dec 30 06:30:01 PST 1999 >Last-Modified: Wed Jan 5 11:50:01 PST 2000 >Originator: michael.middleton@rz.uni-regensburg.de >Organization: >Release: Apache/1.3.9 (Unix) PHP/3.0.12 >Environment: SunOS rrzs8 5.6 Generic_105181-11 sun4m sparc SUNW,SPARCstation-10 Compiler: egcs-1.1.1 >Description: I have the same problem as Michael Reutter with Apache/1.3.4 (Unix) PHP/3.0.7 I could let the user control indexing himself. Extract from http.conf: DocumentRoot /www/home Options FollowSymLinks IncludesNOEXEC AllowOverride AuthConfig FileInfo Indexes Limit Order allow,deny Allow from all .htaccess in "/www/home/images": Options +Indexes That works beautifully. But on Apache/1.3.9 with http.conf: UserDir /www-cgi/daten/home/*/public_html AllowOverride FileInfo AuthConfig Limit Indexes Options MultiViews SymLinksIfOwnerMatch IncludesNoExec and the same .htaccess-file, I get an "Internal Server Error" (500) The only difference I see is that the Directory is in the one case in the normal document tree, and in the other it is a user dirctory. In any case I consider it as a bug. Yours Mike PS I've also noted that "IncludesNOEXEC" is more rigorous in Version 1.3.9 - it does not let me include PHP3 files any more. In 1.3.4 it did not complain. That is good, but it would be nice to know what has changed, even if it's an improvement. Or have I overlooked a change note? >How-To-Repeat: >Fix: >Audit-Trail: State-Changed-From-To: open-feedback State-Changed-By: marc State-Changed-When: Thu Dec 30 08:26:31 PST 1999 State-Changed-Why: Erm... you have never been able to set "Options +Indexes" without AllowOverride Options set. You almost certainly had some other config difference between the two servers (since there appear to be a lot of differences other than one running 1.3.4 and one running 1.3.9). The most likely cause is that the section you quote from the old server didn't apply to what you think it did, ie. the location where you could do this. The same thing is probably true for PHP and IncludesNOExec. Exactly what do you get in the error log when you try, and exactly how is php configured on each machine? There are a bunch of ways to enable php support in your config file, and different ones work in different ways. State-Changed-From-To: feedback-closed State-Changed-By: marc State-Changed-When: Wed Jan 5 11:49:48 PST 2000 State-Changed-Why: Working as designed. From: Marc Slemko To: Apache bugs database Cc: Subject: Re: general/5520: Design Bug in "Options Indexes" not in Apache/ (fwd) Date: Wed, 5 Jan 2000 12:49:07 -0700 (MST) ---------- Forwarded message ---------- Date: Wed, 5 Jan 2000 14:49:46 +0200 From: Michael Middleton To: marc@apache.org Subject: Re: general/5520: Design Bug in "Options Indexes" not in Apache/ > Date: 30 Dec 1999 16:26:34 -0000 > To: apache-bugdb@apache.org, marc@apache.org, > michael.middleton@rz.uni-regensburg.de > From: marc@apache.org > Subject: Re: general/5520: Design Bug in "Options Indexes" not in Apache/1.3.4 > [In order for any reply to be added to the PR database, ] > [you need to include in the Cc line ] > [and leave the subject line UNCHANGED. This is not done] > [automatically because of the potential for mail loops. ] > [If you do not include this Cc, your reply may be ig- ] > [nored unless you are responding to an explicit request ] > [from a developer. ] > [Reply only with text; DO NOT SEND ATTACHMENTS! ] > > > Synopsis: Design Bug in "Options Indexes" not in Apache/1.3.4 > > State-Changed-From-To: open-feedback > State-Changed-By: marc > State-Changed-When: Thu Dec 30 08:26:31 PST 1999 > State-Changed-Why: > Erm... you have never been able to set "Options +Indexes" > without AllowOverride Options set. You almost certainly > had some other config difference between the two servers > (since there appear to be a lot of differences other than > one running 1.3.4 and one running 1.3.9). The most likely > cause is that the section you quote from the old server > didn't apply to what you think it did, ie. the location where > you could do this. > > The same thing is probably true for PHP and IncludesNOExec. > Exactly what do you get in the error log when you try, and > exactly how is php configured on each machine? There are > a bunch of ways to enable php support in your config file, > and different ones work in different ways. > > Of course you're right. I had an "allowOverride all" that I overlooked. Sorry!! Still I'd like a little more fine control over the options in future versions. Again my apologies for the mistake. Next time I'll try to check my facts more carefully before I send an error report. Greetings Mike Middleton ------------------------------------------------------------- Michael Middleton RZ der Universitaet Regensburg 93040 REGENSBURG Tel: +49-941/943-4890 F R Germany >Unformatted: [In order for any reply to be added to the PR database, you need] [to include in the Cc line and make sure the] [subject line starts with the report component and number, with ] [or without any 'Re:' prefixes (such as "general/1098:" or ] ["Re: general/1098:"). If the subject doesn't match this ] [pattern, your message will be misfiled and ignored. The ] ["apbugs" address is not added to the Cc line of messages from ] [the database automatically because of the potential for mail ] [loops. If you do not include this Cc, your reply may be ig- ] [nored unless you are responding to an explicit request from a ] [developer. Reply only with text; DO NOT SEND ATTACHMENTS! ]