https://issues.apache.org/bugzilla/show_bug.cgi?id=44782





--- Comment #5 from Tony <[EMAIL PROTECTED]>  2008-05-13 08:45:43 PST ---
Of course this "as designed" is not good. You are asking everyone to modify
everything they've done in past years to accept and "gobble up" all incoming
"request body" (post, get, head and ?) content even though their programs may
not be parsing incoming data. 

Some programs are designed to do nothing more but fetch a static document or
print an image or ? and be triggered by nothing more than the execution of
their script. Many programs may do nothing more than generate a cookie. But you
are now asking us to create Microsoft bloatware to handing incoming data by
either including our own routines to gobble things up (any kind of request) or
include libraries (id, like Perl use CGI) in our code to create bloatware so
that Apache terminates the "bad" connection! NOT GOOD!

Personally I do not agree with this as designed. This is obviously a change
that either I missed or was not documented in the changes. As far as I know
this was never a problem in past versions of Apache. 

With the growing number of worms and viruses, developers would rather NOT
"gobble up" incoming data if our program is not going to use it. Nor do we want
to include libraries or write code to gobble every possible type of incoming
data. Apache should accept our "exit" code from our program and terminate the
connection between client and server regardless of the reason for our "exit"
code. By keeping connections between client and server open after our exit you
are asking for trouble. The more worms hitting the server that you keep active
the more vunerable our Apache server is. You are asking us to re-develop
everything we've done to handle all or any type of incoming data. For me I feel
this is a burden you are asking us to take on.

Just my opinion of this which I'm sure others share.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to