https://issues.apache.org/bugzilla/show_bug.cgi?id=49043
Summary: Using ssi include directive overwrites QUERY_STRING
variable
Product: Apache httpd-2
Version: 2.2.14
Platform: PC
OS/Version: Linux
Status: NEW
Severity: major
Priority: P2
Component: mod_include
AssignedTo: [email protected]
ReportedBy: [email protected]
It looks like there is a serious bug in the handling of virtual includes with
Apaches SSI filter.
Take the following code:
<html><body>
<!--#echo var="QUERY_STRING"-->
<!--#include virtual="/ssi2.php?abc=1"-->
<!--#echo var="QUERY_STRING"-->
</body></html>
If this is called with the query string "(url)?test=1" then the first echo will
print "test=1" as expected but the second one will output "abc=1".
Apparently the include in the middle completely obliterates the original query
string making it unusable for subsequent includes.
That's a major problem as soon as you use more than one SSI include with
QUERY_STRING in your pages.
(I'm seeing this with the httpd from the latest Centos as well as the newer
httpd from Fedora using the SSI output filter)
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
