>Number:         3865
>Category:       general
>Synopsis:       ScriptAlias gives CGI a bogus SCRIPT_NAME env var
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Tue Feb  9 09:40:00 PST 1999
>Last-Modified:
>Originator:     [EMAIL PROTECTED]
>Organization:
apache
>Release:        1.3.4
>Environment:
BSD/OS dsm8.dsmnet.com 2.0.1 BSDI BSD/OS 2.0.1 Kernel #0: Tue Jan  9 16:32:51 
MST 1996     [EMAIL PROTECTED]:/home/polk/21patch/sys/compile/GENERIC  i386
>Description:
given: ScriptAlias /env/ /var/www/cgi-bin/envshow/catalog/
the CGI script gets SCRIPT_NAME=/env
where under NCSA (which we are converting from)
the CGI script gets SCRIPT_NAME=/cgi-bin/envshow
(which I would argue is correct)

The reason this is important is so I can reconstruct a valid URL
for a redirect by concatenating SERVER_NAME[:SERVER_PORT]SCRIPT_NAME PATH_INFO
>How-To-Repeat:
http://www.commerce.dsmnet.com:8080/env/Vendor/Catalog/Section?id=12345
(compare with)
http://www.commerce.dsmnet.com/env/Vendor/Catalog/Section?id=12345

>Fix:
No, sorry.
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <[EMAIL PROTECTED]> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.                                      ]
[Reply only with text; DO NOT SEND ATTACHMENTS!         ]



Reply via email to