summary |
shortlog |
log |
commit | commitdiff |
tree
raw |
patch |
inline | side by side (from parent 1:
0dee415)
When using SCRIPT_FILENAME provided by server, still make sure the file
exists. Lighttpd can provide non-existant files when setting check-local
is turned off.
PATH_TRANSLATED handling (i.e. Apache) is unaffected: always does 404
checking when walking the path.
$ENV{SCRIPT_FILENAME} = $path;
$ENV{SCRIPT_NAME} = $rel;
}
$ENV{SCRIPT_FILENAME} = $path;
$ENV{SCRIPT_NAME} = $rel;
}
+ elsif (not -f $ENV{SCRIPT_FILENAME}) {
+ print STDERR "PLP: Not found: $ENV{SCRIPT_FILENAME} ($ENV{REQUEST_URI})\n";
+ PLP::error(undef, 404);
+ return;
+ }
$ENV{"PLP_$_"} = $ENV{"SCRIPT_$_"} for qw/NAME FILENAME/;
$ENV{"PLP_$_"} = $ENV{"SCRIPT_$_"} for qw/NAME FILENAME/;