[EMAIL PROTECTED] UserDir enabled problem

2006-11-13 Thread Ed Sawicki
I just compiled and installed Apache version 2.2.3 on Linux. I have mod_userdir loaded and I added these directives to the Apache configuration file: UserDir enabled UserDir disabled root UserDir public_html When I restart Apache, I get this error on-screen and in the error_log: Syntax error

[EMAIL PROTECTED] Confused about LimitRequestBody

2006-10-16 Thread Ed Sawicki
I'm trying to understand the LimitRequestBody directive. I'm working with the latest versions of Apache 2.0 and 2.3. I added this line to my httpd.conf file in the main (server) section - not in a container or any other container: LimitRequestBody 10 I'm using none of the other Limit direc

Re: [EMAIL PROTECTED] Apache/PHP and obfuscated URLs

2006-10-05 Thread Ed Sawicki
Joshua Slive wrote: On 10/5/06, Ed Sawicki <[EMAIL PROTECTED]> wrote: I see that Apache 2.0 does not convert an obfuscated URL into its canonical form. For example, with this URL: http://www.example.com/url/hack I see the Web page and the access log shows this: 10-05 07:41 "GE

[EMAIL PROTECTED] Apache/PHP and obfuscated URLs

2006-10-05 Thread Ed Sawicki
I see that Apache 2.0 does not convert an obfuscated URL into its canonical form. For example, with this URL: http://www.example.com/url/hack I see the Web page and the access log shows this: 10-05 07:41 "GET /url/hack HTTP/1.1" 200 With this obfuscated URL: http://www.example.com/%75%72%6C%

Re: [EMAIL PROTECTED] RedirectMatch

2005-12-20 Thread Ed Sawicki
Joshua Slive wrote: On 12/19/05, Ed Sawicki <[EMAIL PROTECTED]> wrote: I'm administering an Apache server that runs PHP-based Webapps that I have not written and cannot change. These Webapps are being successfully attacked. Here's an example from the log: 66.57.121.127 - - [1

[EMAIL PROTECTED] RedirectMatch

2005-12-19 Thread Ed Sawicki
I'm administering an Apache server that runs PHP-based Webapps that I have not written and cannot change. These Webapps are being successfully attacked. Here's an example from the log: 66.57.121.127 - - [19/Dec/2005:19:50:46 -0800] "GET /phplive/image_tracker.php?l=Bob&x=1&deptid=0&page= http%3A/