2010/5/5 Piotr Kloc <pio@xxxxxx>:
> Hello !
>
> In changelog of mod_fcgid I can see
>
> version 2.1 ( Feb 15th 2007 )
> 2. FCGIWrapper disallowed in .htaccess
>
> but in version 2.3.5 the possibility of use FCGIWrapper in .htaccess
> still exist.
The 2.1 change log isn't clearly worded. In fact, that change some
years back is when FCGIWrapper *started* being respected in .htaccess.
http://svn.apache.org/viewvc?view=revision&revision=753560
> I can use in my .htaccess something like the following
>
>
>
> SetHandler fcgid-script
> FcgidWrapper "/path/to/wrapper.sh"
yeah, I think this would be surprising to many
> How can I deny use FcgidWrapper in .htaccess ?
at the moment you have to patch and rebuild; edit mod_fcgid and
comment out "| OR_FILEINFO" in these two places:
AP_INIT_TAKE123("FcgidWrapper", set_wrapper_config, NULL,
RSRC_CONF | ACCESS_CONF | OR_FILEINFO,
...
AP_INIT_TAKE123("FCGIWrapper", set_wrapper_config, NULL,
RSRC_CONF | ACCESS_CONF | OR_FILEINFO,
The changed lines should look like
RSRC_CONF | ACCESS_CONF /* | OR_FILEINFO */ ,
and recompile/reinstall.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|