apache-modules

HTTP requests and Apache modules: Creative attack vectors

Slightly unorthodox question here: I'm currently trying to break an Apache with a handful of custom modules. What spawned the testing is that Apache internally forwards requests that it considers too large (e.g. 1 MB trash) to modules hooked in appropriately, forcing them to deal with the garbage data - and lack of handling in the cust...

Apache config: send methods other than GET, POST, HEAD to cgi?

I've tried it before and remember that apache2 did not allow to send requests with methods other than HEAD,GET,POST to cgi. Is that true or did I just not find the correct solution back then? I've found somewhere that a line like: Script PUT /cgi-bin/put.pl to access.conf could be used.. What I am trying to do is setting up simple Web...

What apache modules are required?

How can I determine what add-ons to apache will be required for my php code? I have legacy php code that was setup a long time back (and we dont have the documentation on what was done at that time). I need to get this application working on another new server, but apache has yet to be installed. I would like to install only those comp...

What does mod_auth_passthrough do?

Hello. What does apache module mod_auth_passthrough is for exactly? It seems to be shipped with CPanel and sometimes is active. What exactly is it for and what does it do? ...

How can I compile a Lazarus Apache module to Apache 1.3, 2.0 and 2.2 selectively?

I've had a look at /etc/fpc.cfg and there is mention to some defines: FPCAPACHE_1_3 FPCAPACHE_2_0 Then in the fcl-web examples there is mention to: Apache1_3 The only one I've found is on the apr.pas on both these files: /usr/share/fpcsrc/2.4.0/packages/httpd20/src/apr/apr.pas /usr/share/fpcsrc/2.4.0/packages/httpd22/src/apr/ap...

Problem compiling a WebLaz project under Lazarus.

My specs: OS: Ubuntu 10.04 LTS amd64 fpc: 2.4.0 lazarus: 0.9.28 I'm trying to compile a WebLaz project just by creating one and then compiling. Somehow the compiler gets all lost when determinig witch httpd and fpapache Units to use. I've found similar problems in the forums: mod_helloworld.lpr Can't find fpapache Unit ... I NEED ...

Building mod_helloworld.lpr

Im trying to build the apache example of the mod_helloworld.lpr, C:\lazarus\components\fpweb\demo\helloworld\apache Lazarus 0.9.29 FPC Verion 2.4.3 SVN 27129 i386-win32 After Adding $(LazarusDir)\fpc\2.4.3\source\packages\fcl-web\src\ to the Other Unit Files (-Fu) it will compile, but when i build/link i get the errors mod...

XSendfile won't serve the files in apahce2.2

I'm using mod_xsendfile (v0.12) from https://tn123.org/mod_xsendfile/ to serve static files where Django is controlling access to the files based on users and permissions. In my conf file, I have: XSendFile On XSendFilePath e:/documents/ Order allow,deny Allow from all In my django code, I set the headers like so: assert(isi...

How to avoid WSRegister* on a Free Pascal .dll/.so

I finally had success compiling a "blank" Apache module, but now I've hit a rather annoying snag. I want to communicate with a MongoDB server and I opted for the only lib around for FreePascal/Lazarus, pebongo. Dependency for pebongo is synapse. Somehow I'm getting "/usr/lib/apache2/modules/mod_visius.so: undefined symbol: WSRegisterC...