[us...@httpd] Internal server error for script

2009-05-24 Thread Kristof Zelechovski
When I SetHandler cgi-script in .htaccess, I get "Internal server error"; when I SetHandler application/x-httpd-cgi, the script runs fine. What may the reason be? Chris

[us...@httpd] Unable to run ./configure when install apache http server.Error: decision on anonymous shared memory allocation method failed

2009-05-24 Thread Nguyen Tien Duong
Dear all. I am trying to install apache http server version 2.2.11 for centos 5. During the first step, i hit the error of "Error: decision on anonymous shared memory allocation method failed" and not able to proceed further. I would like to seek the help and really appreciate if anyone could

[us...@httpd] Re: Running php scripts outside of document root

2009-05-24 Thread Nicholas Sherlock
Lyle Wincentsen wrote: Thanks for your help, that solved the problem. To answer your question as to why I don't want my php scripts to be in the document root tree, it is a potential security issue. I would rather not allow anyone to peruse my source code as they may be abl

Re: [us...@httpd] Running php scripts outside of document root

2009-05-24 Thread Lyle Wincentsen
Thanks for your help, that solved the problem. To answer your question as to why I don't want my php scripts to be in the document root tree, it is a potential security issue. I would rather not allow anyone to peruse my source code as they may be able to find ways to exploit it more easily. On

[us...@httpd] ............ :( Plz help

2009-05-24 Thread Karthik Nanjangude
Hi SPECF Apache : 2.2.11 Mod jk : mod_jk-1.2.26-httpd-2.0.59.so JBOSS : 4.2.1 ( 2 nos) The specific web apps on the JBOSS are http://: /acme http://: /acme The same have been configured in worker1.properties via Load balancer in Apache/conf directory The Problem 1) PUBLIC D

[us...@httpd] Re: iFrame Injection Blocking

2009-05-24 Thread Nicholas Sherlock
Grant Peel wrote: Then I suppose the next question is, could one use mod_rewrite or some other tool to parse the content (html cide), (and obliterate it possibly) before it is even sent to the client? Not effectively, given the way it encodes itself to avoid detection. Anything you write will

Re: [us...@httpd] Domain Masking (I think?)

2009-05-24 Thread Darryle Steplight
Look at Wp's "Permalinks" settings. This is how WP masks it's url. It will generate some code you need to include in your WP .htaccess file. On Sun, May 24, 2009 at 2:19 PM, Marcin 'Rambo' Roguski wrote: > Also, I just checked: in WP configuration that's "blog's URL address". > >

Re: [us...@httpd] Domain Masking (I think?)

2009-05-24 Thread Marcin 'Rambo' Roguski
Also, I just checked: in WP configuration that's "blog's URL address". - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail:

Re: [us...@httpd] Domain Masking (I think?)

2009-05-24 Thread Marcin 'Rambo' Roguski
> Thus http://drew.mykitchentable.net/fatblog is just the URL to my > WordPress installation. There is nothing being done by Apache. I believe that's the root of your problems: wordpress uses it's own URL rewriting scheme bypassing whatever the host system uses. you should check in wordpress u

Re: [us...@httpd] Re: iFrame Injection Blocking

2009-05-24 Thread Nick Kew
On Sun, 24 May 2009 11:31:51 -0400 "Grant Peel" wrote: > Thanks Nicholas, > > "How could your server possibly assist in such a transaction?" Was > exactly the root question. > > Since you've answered it in your previous statement: "An IFrame is > completely loaded by the browser" > > Then I

Re: [us...@httpd] Re: iFrame Injection Blocking

2009-05-24 Thread Eric Covener
On Sun, May 24, 2009 at 11:31 AM, Grant Peel wrote: > Thanks Nicholas, > > "How could your  server possibly assist in such a transaction?"  Was exactly > the root question. > > Since you've answered it in your previous statement: "An IFrame is > completely loaded by the browser" > > Then I suppose

Re: [us...@httpd] Domain Masking (I think?)

2009-05-24 Thread Drew Tomlinson
Jonas Eckerman wrote: Drew Tomlinson wrote: The other is new. What I want is that if I enter the blog via http://fatblog.freehealthupdates.com/$1, that URL remains in the address bar of the browser and only the /$1 part would change. As it stands now, if I enter via that URL, after the firs

Re: [us...@httpd] Domain Masking (I think?)

2009-05-24 Thread Drew Tomlinson
Davide Bianchi wrote: Drew Tomlinson wrote: The two URLs are: http://drew.mykitchentable.net/fatblog http://fatblog.freehealthupdates.com The first one is not a domain name, but a domain name + a subdir, that make me think that you already have some sort of rewrite or redirect rule th

Re: [us...@httpd] Re: iFrame Injection Blocking

2009-05-24 Thread Grant Peel
Thanks Nicholas, "How could your server possibly assist in such a transaction?" Was exactly the root question. Since you've answered it in your previous statement: "An IFrame is completely loaded by the browser" Then I suppose the next question is, could one use mod_rewrite or some other

[us...@httpd] Re: iFrame Injection Blocking

2009-05-24 Thread Nicholas Sherlock
Grant Peel wrote: Can this be done on the server side somehow, or is an iFrame completely loaded by the browser (i.e. doe the content pas through the server first, or is it cmpletely pulled by the client?). An IFrame is completely loaded by the browser, of course. How could your server possib

[us...@httpd] iFrame Injection Blocking

2009-05-24 Thread Grant Peel
Hi all, I have serveral sites that have had an malicious iFrame injected. I would like to block the sites that the iFrame poiunts to. Can this be done on the server side somehow, or is an iFrame completely loaded by the browser (i.e. doe the content pas through the server first, or is it cmple

Re: [us...@httpd] Domain Masking (I think?)

2009-05-24 Thread Jonas Eckerman
Drew Tomlinson wrote: The other is new. What I want is that if I enter the blog via http://fatblog.freehealthupdates.com/$1, that URL remains in the address bar of the browser and only the /$1 part would change. As it stands now, if I enter via that URL, after the first click, the address ba

Re: [us...@httpd] mod_proxy_http persistant connection issue

2009-05-24 Thread André Warnier
Anthony Catel wrote: André Warnier a écrit : Anthony Catel wrote: ... So if the proxied server never close the connection Apache will have a ghost connection during "ProxyTimeout value" seconds. It's annoying :p Not "never close the connection"; rather, if the proxied server never finishes a

Re: [us...@httpd] Httpd on Ubuntu 9.04

2009-05-24 Thread Lester Caine
Res wrote: On Sun, 24 May 2009, Lester Caine wrote: This is a general anarchy problem with everybody reinterpreting the 'rules' for standardisation of the directory structure to their own ends. Since the Not just directory naming, they rename binaries as well *THAT* is my key objection :)

Re: [us...@httpd] Httpd on Ubuntu 9.04

2009-05-24 Thread Res
On Sun, 24 May 2009, Lester Caine wrote: This is a general anarchy problem with everybody reinterpreting the 'rules' for standardisation of the directory structure to their own ends. Since the Not just directory naming, they rename binaries as well *THAT* is my key objection :) -- Res -B

Re: [us...@httpd] Httpd on Ubuntu 9.04

2009-05-24 Thread Lester Caine
Res wrote: Sander, Maybe a vote should be taken to issue notice to them, to cease renaming key apache components, its bad enough the butchering they do, but renaming is crossing the line IMHO, as we've just seen why in this thread, for every one you hear, you know there's many thousands more y

Re: [us...@httpd] Httpd on Ubuntu 9.04

2009-05-24 Thread Res
Sander, Maybe a vote should be taken to issue notice to them, to cease renaming key apache components, its bad enough the butchering they do, but renaming is crossing the line IMHO, as we've just seen why in this thread, for every one you hear, you know there's many thousands more you don't.

Re: [us...@httpd] Httpd on Ubuntu 9.04

2009-05-24 Thread Res
One would assume the Apache Debian packager is on this list, perhaps they would like to comment as to why they do this, but I suspect they will not. Nothing beats the source install, if you screwup it takes seconds to revert to previous version and you know you are using just that version. I