Re: Disable multiple file extension support?

2006-05-25 Thread Rich Bowen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Joshua Slive wrote: > On 5/25/06, Rich Bowen <[EMAIL PROTECTED]> wrote: >> The folks at Drupal have apparently just discovered that >> something.php.bar is executed as PHP, and, thus, checking to see if a >> file ends with .php is not sufficient to ens

Re: Disable multiple file extension support?

2006-05-25 Thread Joshua Slive
On 5/25/06, Rich Bowen <[EMAIL PROTECTED]> wrote: The folks at Drupal have apparently just discovered that something.php.bar is executed as PHP, and, thus, checking to see if a file ends with .php is not sufficient to ensure that their file upload feature can't be exploited. In fact, they have a

Disable multiple file extension support?

2006-05-25 Thread Rich Bowen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The folks at Drupal have apparently just discovered that something.php.bar is executed as PHP, and, thus, checking to see if a file ends with .php is not sufficient to ensure that their file upload feature can't be exploited. In fact, they have a whit

RE: Apache 2.0 -> 2.2 Module upgrade...errors

2006-05-25 Thread Schwenker, Stephen
Thanks Paul, The extra --cppflags did it. It didn't work with just --cflags on it's own. Thank you, Steve. -Original Message- From: Paul Querna [mailto:[EMAIL PROTECTED] Sent: Thursday, May 25, 2006 1:09 PM To: dev@httpd.apache.org Subject: Re: Apache 2.0 -> 2.2 Module upgrade...erro

Re: svn commit: r395211 - /httpd/httpd/trunk/configure.in

2006-05-25 Thread Ruediger Pluem
On 04/19/2006 12:57 PM, > Author: jorton > Date: Wed Apr 19 03:57:20 2006 > New Revision: 395211 > > URL: http://svn.apache.org/viewcvs?rev=395211&view=rev > Log: > * configure.in: Add --with-included-apr flag to force use of the > bundled copies of APR and APR-util. > > Modified: > httpd/h

Re: Apache 2.0 -> 2.2 Module upgrade...errors

2006-05-25 Thread Paul Querna
Garrett Rooney wrote: On 5/25/06, Schwenker, Stephen <[EMAIL PROTECTED]> wrote: Hello, I'm trying to upgrade a 3rd party module from 2.0 to 2.2 and I'm getting the following errors. Can anyone help me figure out what the issue is? I'm not sure where to start. Thank you, Steve. g

Re: Apache 2.0 -> 2.2 Module upgrade...errors

2006-05-25 Thread Garrett Rooney
On 5/25/06, Schwenker, Stephen <[EMAIL PROTECTED]> wrote: Hello, I'm trying to upgrade a 3rd party module from 2.0 to 2.2 and I'm getting the following errors. Can anyone help me figure out what the issue is? I'm not sure where to start. Thank you, Steve. gcc -DHAVE_CONFIG_H -g -O2

Apache 2.0 -> 2.2 Module upgrade...errors

2006-05-25 Thread Schwenker, Stephen
Hello,   I'm trying to upgrade a 3rd party module from 2.0 to 2.2 and I'm getting the following errors.  Can anyone help me figure out what the issue is?  I'm not sure where to start.   Thank you,     Steve.         gcc -DHAVE_CONFIG_H -g -O2 -pthread -fPIC -DUSING_MIBII_SYSORTABLE_MODULE

Re: mod_disk_cache read-while-caching patch

2006-05-25 Thread Niklas Edmundsson
On Tue, 2 May 2006, Niklas Edmundsson wrote: In any case the patch is more or less finished, independent testing and auditing haven't been done yet but I can submit a preliminary jumbo-patch if people are interested in having a look at it now. Post it, people can take a look. OK. It's atta

Re: PR 39643 revealed a problem between mod_cache and mod_filter

2006-05-25 Thread Ruediger Pluem
On 05/25/2006 09:02 AM, Nick Kew wrote: > On Thursday 25 May 2006 06:56, Ruediger Pluem wrote: > > > Which begs the question: why are we attaching output filters to mod_cache? Because some module might offer a protocol or connection filter that should be also run on cached content. e.g. core_i

Re: PR 39643 revealed a problem between mod_cache and mod_filter

2006-05-25 Thread Nick Kew
On Thursday 25 May 2006 06:56, Ruediger Pluem wrote: > This is because the filters (and thus the contexts of at least some > filters) get initialized in ap_invoke_filter_init which is a static > function in config.c. ap_invoke_filter_init gets only called by > ap_invoke_handler (also in config.c)