>Number: 4874 >Category: general >Synopsis: Satisfy directive used improperly yields hard to diagnose >errors. >Confidential: no >Severity: non-critical >Priority: medium >Responsible: apache >State: open >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Wed Aug 18 01:50:00 PDT 1999 >Last-Modified: >Originator: [EMAIL PROTECTED] >Organization: apache >Release: 1.3.6 >Environment: RedHat Linux 6.0/Kernel 2.2.10/egcs 2.91.66 >Description: If the Satisfy directive is used without a Require directive, the result is an internal server error. Nothing is sent to the error log. Instead, a line of this form is logged to the access log:
12.21.6.40 - - [18/Aug/1999:00:28:41 -0400] "GET /guest_login/index.html HTTP/1.1" - 536 "http://www.censored.com/fla/index.html"; "Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)" As shown, no numeric code is given. The result is the same if the config error is done in the conf file or in an .htaccess file. apachectl configtest doesn't report a problem, and neither does the server on load. >How-To-Repeat: Simply create an .htaccess file and use directives like this: order deny,allow allow from env=VALID_REFERER deny from all satisfy any >Fix: Have the server recognize it as a configuration error and warn (if in the config file), or log to the error log descriptively (if used in .htaccess). >Audit-Trail: >Unformatted: [In order for any reply to be added to the PR database, you need] [to include <[EMAIL PROTECTED]> in the Cc line and make sure the] [subject line starts with the report component and number, with ] [or without any 'Re:' prefixes (such as "general/1098:" or ] ["Re: general/1098:"). If the subject doesn't match this ] [pattern, your message will be misfiled and ignored. The ] ["apbugs" address is not added to the Cc line of messages from ] [the database automatically because of the potential for mail ] [loops. If you do not include this Cc, your reply may be ig- ] [nored unless you are responding to an explicit request from a ] [developer. Reply only with text; DO NOT SEND ATTACHMENTS! ]
