On Jun 25, 2007, at 3:04 AM, Steinar H. Gunderson wrote:
So you've introduced something that looks much the same as the traditional "CGI overhead", but applied it to every request instead of just CGI?Every single _connection_, but yes.
How would that work for multiple requests on keptalive connections? Wouldn't that allow me to send a sequence like
GET /yourpage HTTP/1.1 Host: yourhost.com Connection: Keep-Alive ... which would be dispatched to run as you, followed GET /badasshackscript HTTP/1.1 Host: theotherguy.com ...over the same connection, which would have badasshackscript be found on the other guy's vhost but executed as you?
S. -- Sander Temme [EMAIL PROTECTED] PGP FP: 51B4 8727 466A 0BC3 69F4 B7B8 B2BE BC40 1529 24AF
smime.p7s
Description: S/MIME cryptographic signature
