Hello list, > This is usually the intended behavior. Many PHP frameworks use > PATH_INFO to handle requests. > > See the documentation for AcceptPathInfo: > http://httpd.apache.org/docs/current/mod/core.html#acceptpathinfo Thanks Yehuda. I see why this is being used. Is this the default for a long time? Last time I checked the use of trailing slashes or other nonsense to bypass security features it didn't work. I run a module which should restrict the use of certain URLs, so I think I have to prevent this configuration somehow. Thanks for the link. Greetings -- Christoph Gröver --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|