Hello list,

> This is usually the intended behavior. Many PHP frameworks use
> PATH_INFO to handle requests.
> 
> See the documentation for AcceptPathInfo:
> http://httpd.apache.org/docs/current/mod/core.html#acceptpathinfo

Thanks Yehuda. I see why this is being used. Is this the default for
a long time?
Last time I checked the use of trailing slashes or other nonsense 
to bypass security features it didn't work.

I run a module which should restrict the use of certain URLs, so I
think I have to prevent this configuration somehow.

Thanks for the link.
Greetings

-- 
Christoph Gröver

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to