>Number:         1869
>Category:       mod_access
>Synopsis:       Server error if no final newline in .htaccess
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Wed Feb 25 10:00:01 PST 1998
>Last-Modified:
>Originator:     [EMAIL PROTECTED]
>Organization:
apache
>Release:        1.3b5
>Environment:
FreeBSD cis.pvt.k12.ca.us 2.1.5-RELEASE FreeBSD 2.1.5-RELEASE #0: Wed Jul 17 
03:09:31  1996     [EMAIL PROTECTED]:/usr/src/sys/compile/GENERIC  i386
>Description:
I had a .htaccess file that looked like:

AuthUserFile /usr/local/www/server/conf/htpasswds
AuthGroupFile /dev/null
AuthName "Student Information"
AuthType Basic

<Limit GET>
require user parent
</Limit>

and there was no final carriage return or newline at the end of the
</Limit> directive.  We were running Apache/1.1.1 and it worked fine,
but we got the following message in the error log in 1.3b5:

[Tue Feb 24 21:54:54 1998] [alert] (2)No such file or directory: 
/usr/local/www/cis/books-restricted/cgi-bin/.htaccess: </Limit> takes no 
arguments

The user also got a server error 500 message.

The problem went away after I added a newline.
>How-To-Repeat:

>Fix:
Probably a simple parsing problem either when reading the htaccess file
or parsing the limit directive
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <[EMAIL PROTECTED]> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]



Reply via email to