[ ispman-Bugs-1037077 ] ExecCGI for ScriptDir always on

Bugs item #1037077, was opened at 2004-09-29 17:47
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108390&aid=1037077&group_id=8390

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: micha137 (micha137)
Assigned to: Nobody/Anonymous (nobody)
Summary: ExecCGI for ScriptDir always on

Initial Comment:
CGI scripts for a vhost are always executed in the
cgi-bin directory, even when through the options for
the cgi-bin directory ExecCGI is off. This comes from
the ScriptAlias directive for apache implicitly
enabling cgi execution.

Solution: Only add SciptAlias when ExecCGI is on!

Proposed change to <templates/vhost.conf>:

...
  <perl>
          if($ispmanVhostScriptDirOption =~ /ExecCGI/)
          {
            $OUT .= "ScriptAlias     /cgi-bin/
$scriptdir/\n";
            $OUT .= "   <Directory      $scriptdir>\n";
            $OUT .= "          
$ispmanVhostScriptDirOption\n";
            $OUT .= "           AllowOverride FileInfo
AuthConfig Limit Indexes\n";
            $OUT .= "   </Directory>\n";
          }
  </perl>
...

Additionally the AllowOverride directive here makes
sure users cannot enable ExecCGI through their own
.htaccess file.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108390&aid=1037077&group_id=8390


-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl