>Number: 1182 >Category: mod_include >Synopsis: SSI: include virtual doesn't handle SCRIPT_NAME correctly. >Confidential: no >Severity: critical >Priority: medium >Responsible: apache (Apache HTTP Project) >State: open >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Tue Sep 30 21:20:02 1997 >Originator: [EMAIL PROTECTED] >Organization: apache >Release: 1.2.x >Environment: NetBSD/Alpha 1.2G-current (1.2.0), HP-UX 9.05 (1.2.4) >Description: The #include virtual="scriptnamehere" SSI directive doesn't handle the SCRIPT_NAME correctly when given path info.
When a CGI is run from an SSI include virtual directive, any path info given in the URL gets tacked onto the end of the SCRIPT_NAME. For example, going to /cgi-bin/test-cgi/foo would run test-cgi with SCRIPT_NAME=/cgi-bin/test-cgi/foo. >How-To-Repeat: Make an SSI page with this in it: <PRE><!--#include virtual="/cgi-bin/test-cgi/foo"--></pre> and watch it break. >Fix: >Audit-Trail: >Unformatted:
