On Wed, Mar 20, =
2013 at 09:38:30AM -0400, David Sugar wrote:
> Isn't this what the ex=
isting apache uri rewrite rules/module is also normally
> used
for, to do translations between uri paths and cgi arguments?  I recal=
l
> mediawiki can use rewrite rules to normalize document paths to fe=
ed the core
> app.  Why do they have/want to do it differently t=
han anyone else has?
> Doing it as a kind of redirect just seems biza=
are to me.  But I have heard
> equally bizzare things recently, =
like people insisting that file managers
> should now only present ca=
se insensitive file ordering, when of course the
> native file system=
is and always have been case sensitive...

I'd have to look at the s=
pecifics of what your refering to, but while in
the Pharmacy, the essent=
ial difference would be regular expression
mapping wbich would be a fair=
ly large security hole for a standard
setup, or any set up with usage of=
an .htaccess file.  It would allow
for anyone to inject anything a=
t all into cgi as a get statement.


Ruben


>

> Ruben Safir wrote:
>
> > This is an example of so=
mething that is just a PIA to churn through,
> > partly because th=
ese idiots are splicing an ISII crapolla fix into
> > their "docum=
entations", and secondly because assume your sitting on
> > someon=
e elses webserver, rather than your own, and thirdly because
> > =
they believe that your apache set up has a rather rare and somewhat
>=
> insecure module installed for RedirectMatchUrl, and then ...
> =
>
> > their last instruction fails to identify what the hell t=
he code is
> > for!  Is it httpd.conf?  Is it perl code =
to drop into the application?
> >
> > The who concept is=
to redirect a static uri like
> >
> > /www.myuri.com/messages/some_numbers_as_arguments" target=3D"_blank">http:/=
/www.myuri.com/messages/some_numbers_as_arguments
> >

> > to their cgi engine automaticaly, to be translated to lookr>> > internally as something like this:
> >
> >&n=
bsp;
> > bers_as_arguments" target=3D"_blank">http://www.myuri.com/cgi-bin/yabb.pl?s=
ome_numbers_as_arguments
> >
> >
> > It wo=
uld be just simpler to drop down to mod_perl and add it as a
> > s=
cript into the apache calls under the URI of
> >
> > href=3D"http://www.myuri.com/messages/" target=3D"_blank">http://www.myuri=
.com/messages/
> >
> > and be done with it....
&=
gt; >
> > The whole discussion of symbolic links to directorie=
s is just confussing
> > the issue.  There doesn't need to be=
any real directory when the server
> > is picking up that uri and=
handling it entirely within the apache
> > engine.
> >

> > Ruben
> >