Mailing List Archive

Apache 0.8.11x allows includes when it shouldn't
Bug: apache completely ignores the Includes option; it _always_ allows
server-side includes.

David.

-----------------------------------------
*** mod_include.c~ Sat Aug 12 16:19:31 1995
--- mod_include.c Thu Aug 24 17:25:53 1995
***************
*** 783,788 ****
--- 783,789 ----
(enum xbithack *)get_module_config(r->per_dir_config,&includes_module);
int errstatus;

+ if (!(allow_options (r) & OPT_INCLUDES)) return DECLINED;
if (r->method_number != M_GET) return DECLINED;
if (r->finfo.st_mode == 0) return NOT_FOUND;

-----------------------------------------