Re: GET requests being changed to POST

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thanks for the reply Joshua.

Firstly your quite right. The title is the wrong way round. Apologies - it's been a hard day !!

Secondly, I should explain that I am a web developer and not a server administrator so I don't have access to very much except to the access logs at our ISP. I'm simply trying to see whether Apache is the cause of the problem and whether we can find a workaround to whatever is causing it.

As regards the logs, I have posted some extracts below (with IP No. and date removed to make them more readable). In the case of the first four, the response size of 1483 is simply our "Thank You" page following final submission. In fact no data was received from these submissions. In case of the last two, it was for a short error message following lack of received data. In the majority of cases though, we have identical records in the logs which are showing as POST and where there was successful transmission of data. Each of the codes below has a 200 response ! In all cases, the request was sent as POST.

John

"GET /cgi-bin/response.pl HTTP/1.1" 200 1483 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" "GET /cgi-bin/response.pl HTTP/1.1" 200 1483 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" "GET /cgi-bin/response.pl HTTP/1.1" 200 1483 "http://www.teamfocus.co.uk/cgi-bin/quest.pl"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "GET /cgi-bin/response.pl HTTP/1.1" 200 1483 "http://www.teamfocus.co.uk/cgi-bin/quest.pl"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "GET /cgi-bin/quest.pl HTTP/1.1" 200 62 "http://www.teamfocus.co.uk/cgi-bin/quest.pl"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "GET /cgi-bin/quest.pl HTTP/1.1" 200 62 "http://www.teamfocus.co.uk/cgi-bin/quest.pl"; "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)" "GET /cgi-bin/quest.pl HTTP/1.1" 200 62 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"




----- Original Message ----- From: Joshua Slive
To: users@xxxxxxxxxxxxxxxx ; John Gosling
Sent: Friday, May 18, 2007 4:02 PM
Subject: Re:  GET requests being changed to POST


On 5/18/07, John Gosling <johngosling@xxxxxxxxxxxxxxxxxxxxxx> wrote:
Hi,

We have a web application which had been running unproblematically for
around 6 years until several days ago (approximately 10th May).  At this
time we suddenly found that requests sent via POST were intermittently
showing up as GET requests in the Apache access logs. On each such occasion
(around 10% of requests)  the application would fail as a consequence with
none of the POSTed data reaching our scripts. On the remaining 90% of
occasions the POST request were getting transmitted successfully.

So your subject line is backwards.

(a) has their been a recent update of Apache or related software over the
last 10 days which could possibly have caused this problem?

No. And in any case Apache doesn't auto-update, so it would need to be
the result of you specifically changing something in apache.


(b) does anyone have any idea of what sort of process could alter a POST
request from a browser in such a manner as it finishes up as a GET request
without any posted data by the time it reaches a CGI scripts? Incidentally, on this point, we are pretty certain that the form is not broken in any way
and submits a valid POST request.

The most common reason for a POST to change to a GET is that the POST
is redirected. Check your logs for 3xx response codes and figure out
what is generating them.

It isn't clear if you are actually seeing GET or POST in your
access_log. Perhaps you can show us some of the contents of the
access_log.

In the worse case, you should trace exactly what is getting sent back
and forth to apache using something on the wire or something like
mod_dumpio:
http://httpd.apache.org/docs/2.2/mod/mod_dumpio.html

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux