Attached is a patch that impliments a new directive in mod_include.c,
#parseqs, which parses the name=value pairs on the query string and places
the results in the subprocess environment table, allowing you to do highly
neat things with SSI scripts. I found this feature to be quite useful.

Caveats:
1. A potential security problem is that a malicious person may be able to
use it to override important environment variables on a page where he
knows #parseqs is in use. We might want to disallow all-CAPS variables
from being modified in this fashion.

2. There is no support for query string variables with multiple values.


Please go easy on me. :) I haven't submitted anything to Apache before,
but I found this hack to be quite useful. I look forward to your comments.





Attachment: mod_include-2.0.47.diff
Description: Binary data

Reply via email to