From: Michael M. <mi...@gn...> - 2007-02-08 18:24:49
|
Hi By now I'm thinking this is a bug in AA. We run aa-2.10.0 Using my RewriteRule and redirecting to phpinfo displays the correct als. Redirecting to view.php3 adds the two backslashes. I think what happens is that in case of being called by <!--#include="/apc-aa/view.php3"--> ActionApps tries to parse the $_SERVER['QUERY_STRING'] and gets it wrong for some reason. Michael On Wednesday 07 February 2007 11:34, Michael Moritz wrote: > Hi > > I am experimenting with mod_rewrite to make AA URLs more readable and also > parseable for log file analysers. Now I have run into what seems a silly > problem: > > If you have a rule like this > > RewriteRule ^/sub-440625$ /sub.shtml?als[cid]=440624&debug=1&nocache=1 [NE] > > it reaches AA/PHP as > > Starting view > ParseViewParameters: vid=XXX, query_string=cmd:set:als:Array ( [cid\] => > 440624\ > > Note the two trailing backslashes. It seems to be caused by the square > brackets > > Any ideas how to fix this? > > Thanks, > > Michael > > ------------------------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job > easier. Download IBM WebSphere Application Server v.1.0.1 based on Apache > Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ > "Did you get answers to your ActionApps-related queries? If yes, please > help the ActionApps community by uploading the answers onto appropriate > space in the ActionApps documentation wiki. See the *How to contribute* > section today http://actionapps.org/en/How_To_Contribute" > _______________________________________________ > apc-aa-general mailing list > apc...@li... > https://lists.sourceforge.net/lists/listinfo/apc-aa-general |
From: Michael M. <mi...@gn...> - 2007-04-05 11:33:14
|
Hi I think I have found a fix for this but I wonder whether it breaks anything else. In some (probably rare) cases AA uses QUERY_STRING_UNESCAPED. In there the brackets of als get escape -- als\[bla\] and teh following parse_str call will ignore the als. I have made a change in the function shtml_query_string - util.php3, 162 $ret_string = ($REQUEST_URI AND strpos($REQUEST_URI, '?')) ? substr($REQUEST_URI, strpos($REQUEST_URI, '?')+1) : ( isset($REDIRECT_QUERY_STRING_UNESCAPED) ? $REDIRECT_QUERY_STRING_UNESCAPED : stripslashes($QUERY_STRING_UNESCAPED) ); And now it works. Can someone check this / check it into SVN if it's ok. I'm not sure I have SVN access. thanks mimo On Thursday 08 February 2007 18:24, Michael Moritz wrote: > Hi > > By now I'm thinking this is a bug in AA. We run aa-2.10.0 > > Using my RewriteRule and redirecting to phpinfo displays the correct als. > Redirecting to view.php3 adds the two backslashes. I think what happens is > that in case of being called by <!--#include="/apc-aa/view.php3"--> > ActionApps tries to parse the $_SERVER['QUERY_STRING'] and gets it wrong > for some reason. > > Michael > > On Wednesday 07 February 2007 11:34, Michael Moritz wrote: > > Hi > > > > I am experimenting with mod_rewrite to make AA URLs more readable and > > also parseable for log file analysers. Now I have run into what seems a > > silly problem: > > > > If you have a rule like this > > > > RewriteRule ^/sub-440625$ /sub.shtml?als[cid]=440624&debug=1&nocache=1 > > [NE] > > > > it reaches AA/PHP as > > > > Starting view > > ParseViewParameters: vid=XXX, query_string=cmd:set:als:Array ( [cid\] => > > 440624\ > > > > Note the two trailing backslashes. It seems to be caused by the square > > brackets > > > > Any ideas how to fix this? > > > > Thanks, > > > > Michael > > > > ------------------------------------------------------------------------- > > Using Tomcat but need to do more? Need to support web services, security? > > Get stuff done quickly with pre-integrated technology to make your job > > easier. Download IBM WebSphere Application Server v.1.0.1 based on Apache > > Geronimo > > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > > _______________________________________________ > > "Did you get answers to your ActionApps-related queries? If yes, please > > help the ActionApps community by uploading the answers onto appropriate > > space in the ActionApps documentation wiki. See the *How to contribute* > > section today http://actionapps.org/en/How_To_Contribute" > > _______________________________________________ > > apc-aa-general mailing list > > apc...@li... > > https://lists.sourceforge.net/lists/listinfo/apc-aa-general > > ------------------------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job > easier. Download IBM WebSphere Application Server v.1.0.1 based on Apache > Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ > Apc-aa-coders mailing list > Apc...@li... > https://lists.sourceforge.net/lists/listinfo/apc-aa-coders |
From: Honza M. <hon...@ec...> - 2007-04-05 13:24:48
|
Hi Michael, You are right, there are additional slashes in the $QUERY_STRING_UNESCAPED: QUERY_STRING_UNESCAPED The unescaped version of any search query the client sent, with all characters special to the shell escaped with a backslash. So, the solution is to remove it. Please send your fix to the SVN. You have the access to it - I checked the rights right now. Honza Michael Moritz píše v Čt 05. 04. 2007 v 12:32 +0100: > Hi > > I think I have found a fix for this but I wonder whether it breaks > anything else. > > In some (probably rare) cases AA uses QUERY_STRING_UNESCAPED. In there > the brackets of als get escape -- als\[bla\] and teh following > parse_str call will ignore the als. > > I have made a change in the function shtml_query_string - util.php3, > 162 > > $ret_string = ($REQUEST_URI AND strpos($REQUEST_URI, '?')) ? > > substr($REQUEST_URI, strpos($REQUEST_URI, '?')+1) : > > ( isset($REDIRECT_QUERY_STRING_UNESCAPED) ? > > $REDIRECT_QUERY_STRING_UNESCAPED : > > stripslashes($QUERY_STRING_UNESCAPED) ); > > And now it works. Can someone check this / check it into SVN if it's > ok. I'm not sure I have SVN access. > > thanks > > mimo > > On Thursday 08 February 2007 18:24, Michael Moritz wrote: > > > Hi > > > > > > By now I'm thinking this is a bug in AA. We run aa-2.10.0 > > > > > > Using my RewriteRule and redirecting to phpinfo displays the correct > als. > > > Redirecting to view.php3 adds the two backslashes. I think what > happens is > > > that in case of being called by <!--#include="/apc-aa/view.php3"--> > > > ActionApps tries to parse the $_SERVER['QUERY_STRING'] and gets it > wrong > > > for some reason. > > > > > > Michael > > > > > > On Wednesday 07 February 2007 11:34, Michael Moritz wrote: > > > > Hi > > > > > > > > I am experimenting with mod_rewrite to make AA URLs more readable > and > > > > also parseable for log file analysers. Now I have run into what > seems a > > > > silly problem: > > > > > > > > If you have a rule like this > > > > > > > > RewriteRule ^/sub-440625 > $ /sub.shtml?als[cid]=440624&debug=1&nocache=1 > > > > [NE] > > > > > > > > it reaches AA/PHP as > > > > > > > > Starting view > > > > ParseViewParameters: vid=XXX, query_string=cmd:set:als:Array > ( [cid\] => > > > > 440624\ > > > > > > > > Note the two trailing backslashes. It seems to be caused by the > square > > > > brackets > > > > > > > > Any ideas how to fix this? > > > > > > > > Thanks, > > > > > > > > Michael > > > > > > > > > ------------------------------------------------------------------------- > > > > Using Tomcat but need to do more? Need to support web services, > security? > > > > Get stuff done quickly with pre-integrated technology to make your > job > > > > easier. Download IBM WebSphere Application Server v.1.0.1 based on > Apache > > > > Geronimo > > > > > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > > > > _______________________________________________ > > > > "Did you get answers to your ActionApps-related queries? If yes, > please > > > > help the ActionApps community by uploading the answers onto > appropriate > > > > space in the ActionApps documentation wiki. See the *How to > contribute* > > > > section today http://actionapps.org/en/How_To_Contribute" > > > > _______________________________________________ > > > > apc-aa-general mailing list > > > > apc...@li... > > > > https://lists.sourceforge.net/lists/listinfo/apc-aa-general > > > > > > > ------------------------------------------------------------------------- > > > Using Tomcat but need to do more? Need to support web services, > security? > > > Get stuff done quickly with pre-integrated technology to make your > job > > > easier. Download IBM WebSphere Application Server v.1.0.1 based on > Apache > > > Geronimo > > > > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > > > _______________________________________________ > > > Apc-aa-coders mailing list > > > Apc...@li... > > > https://lists.sourceforge.net/lists/listinfo/apc-aa-coders > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share your > opinions on IT & business topics through brief surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ Apc-aa-coders mailing list Apc...@li... https://lists.sourceforge.net/lists/listinfo/apc-aa-coders -- |
From: Michael M. <mi...@gn...> - 2007-04-21 16:30:53
|
Hi Honza I have checked this and a couple of other bugfixes (esp. when running in=20 fastcgi) into SVN. I have discovered that the line above also needs=20 stripslashes in order for AA to work with fastcgi. I'll check the fix in. > > $ret_string =3D ($REQUEST_URI AND strpos($REQUEST_URI, '?')) ? > > > > substr($REQUEST_URI, strpos($REQUEST_URI, '?')+1) : > > > > ( isset($REDIRECT_QUERY_STRING_UNESCAPED) ? > > > > $REDIRECT_QUERY_STRING_UNESCAPED : stripslashes($REDIRECT_QUERY_STRING_UNESCAPED ): > > > > stripslashes($QUERY_STRING_UNESCAPED) ); mimo On Thursday 05 April 2007 14:24, Honza Malik wrote: > Hi Michael, > > You are right, there are additional slashes in the > $QUERY_STRING_UNESCAPED: > > QUERY_STRING_UNESCAPED > The unescaped version of any search query the client > sent, with all characters special to the shell escaped > with a backslash. > > So, the solution is to remove it. > > Please send your fix to the SVN. You have the access to it - I > checked the rights right now. > > Honza > > Michael Moritz p=ED=B9e v =C8t 05. 04. 2007 v 12:32 +0100: > > Hi > > > > I think I have found a fix for this but I wonder whether it breaks > > anything else. > > > > In some (probably rare) cases AA uses QUERY_STRING_UNESCAPED. In there > > the brackets of als get escape -- als\[bla\] and teh following > > parse_str call will ignore the als. > > > > I have made a change in the function shtml_query_string - util.php3, > > 162 > > > > $ret_string =3D ($REQUEST_URI AND strpos($REQUEST_URI, '?')) ? > > > > substr($REQUEST_URI, strpos($REQUEST_URI, '?')+1) : > > > > ( isset($REDIRECT_QUERY_STRING_UNESCAPED) ? > > > > $REDIRECT_QUERY_STRING_UNESCAPED : > > > > stripslashes($QUERY_STRING_UNESCAPED) ); > > > > And now it works. Can someone check this / check it into SVN if it's > > ok. I'm not sure I have SVN access. > > > > thanks > > > > mimo > > > > On Thursday 08 February 2007 18:24, Michael Moritz wrote: > > > Hi > > > > > > > > > > > > By now I'm thinking this is a bug in AA. We run aa-2.10.0 > > > > > > > > > > > > Using my RewriteRule and redirecting to phpinfo displays the correct > > > > als. > > > > > Redirecting to view.php3 adds the two backslashes. I think what > > > > happens is > > > > > that in case of being called by <!--#include=3D"/apc-aa/view.php3"--> > > > > > > ActionApps tries to parse the $_SERVER['QUERY_STRING'] and gets it > > > > wrong > > > > > for some reason. > > > > > > > > > > > > Michael > > > > > > On Wednesday 07 February 2007 11:34, Michael Moritz wrote: > > > > Hi > > > > > > > > > > > > > > > > I am experimenting with mod_rewrite to make AA URLs more readable > > > > and > > > > > > also parseable for log file analysers. Now I have run into what > > > > seems a > > > > > > silly problem: > > > > > > > > > > > > > > > > If you have a rule like this > > > > > > > > > > > > > > > > RewriteRule ^/sub-440625 > > > > $ /sub.shtml?als[cid]=3D440624&debug=3D1&nocache=3D1 > > > > > > [NE] > > > > > > > > > > > > > > > > it reaches AA/PHP as > > > > > > > > > > > > > > > > Starting view > > > > > > > > ParseViewParameters: vid=3DXXX, query_string=3Dcmd:set:als:Array > > > > ( [cid\] =3D> > > > > > > 440624\ > > > > > > > > > > > > > > > > Note the two trailing backslashes. It seems to be caused by the > > > > square > > > > > > brackets > > > > > > > > > > > > > > > > Any ideas how to fix this? > > > > > > > > > > > > > > > > Thanks, > > > > > > > > > > > > > > > > Michael > > > > -----------------------------------------------------------------------= =2D- > > > > > > Using Tomcat but need to do more? Need to support web services, > > > > security? > > > > > > Get stuff done quickly with pre-integrated technology to make your > > > > job > > > > > > easier. Download IBM WebSphere Application Server v.1.0.1 based on > > > > Apache > > > > > > Geronimo > > > > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat= =3D121642 > > > > > > _______________________________________________ > > > > > > > > "Did you get answers to your ActionApps-related queries? If yes, > > > > please > > > > > > help the ActionApps community by uploading the answers onto > > > > appropriate > > > > > > space in the ActionApps documentation wiki. See the *How to > > > > contribute* > > > > > > section today http://actionapps.org/en/How_To_Contribute" > > > > > > > > _______________________________________________ > > > > > > > > apc-aa-general mailing list > > > > > > > > apc...@li... > > > > > > > > https://lists.sourceforge.net/lists/listinfo/apc-aa-general > > > > -----------------------------------------------------------------------= =2D- > > > > > Using Tomcat but need to do more? Need to support web services, > > > > security? > > > > > Get stuff done quickly with pre-integrated technology to make your > > > > job > > > > > easier. Download IBM WebSphere Application Server v.1.0.1 based on > > > > Apache > > > > > Geronimo > > > > http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat= =3D121642 > > > > > _______________________________________________ > > > > > > Apc-aa-coders mailing list > > > > > > Apc...@li... > > > > > > https://lists.sourceforge.net/lists/listinfo/apc-aa-coders > > > > -----------------------------------------------------------------------= =2D- > > Take Surveys. Earn Cash. Influence the Future of IT > > Join SourceForge.net's Techsay panel and you'll get the chance to share > > your opinions on IT & business topics through brief surveys-and earn ca= sh > > http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourceforge&CID= =3DDEVDEV > > _______________________________________________ Apc-aa-coders mailing > > list Apc...@li... > > https://lists.sourceforge.net/lists/listinfo/apc-aa-coders |
From: Honza M. <hon...@ec...> - 2007-04-23 09:07:02
|
Great. Thanks, Honza Michael Moritz píše v So 21. 04. 2007 v 17:30 +0100: > Hi Honza > > I have checked this and a couple of other bugfixes (esp. when running in > fastcgi) into SVN. I have discovered that the line above also needs > stripslashes in order for AA to work with fastcgi. I'll check the fix in. > > > > $ret_string = ($REQUEST_URI AND strpos($REQUEST_URI, '?')) ? > > > > > > substr($REQUEST_URI, strpos($REQUEST_URI, '?')+1) : > > > > > > ( isset($REDIRECT_QUERY_STRING_UNESCAPED) ? > > > > > > $REDIRECT_QUERY_STRING_UNESCAPED : > stripslashes($REDIRECT_QUERY_STRING_UNESCAPED ): > > > > > > stripslashes($QUERY_STRING_UNESCAPED) ); > > mimo > > On Thursday 05 April 2007 14:24, Honza Malik wrote: > > Hi Michael, > > > > You are right, there are additional slashes in the > > $QUERY_STRING_UNESCAPED: > > > > QUERY_STRING_UNESCAPED > > The unescaped version of any search query the client > > sent, with all characters special to the shell escaped > > with a backslash. > > > > So, the solution is to remove it. > > > > Please send your fix to the SVN. You have the access to it - I > > checked the rights right now. > > > > Honza > > > > Michael Moritz píše v Čt 05. 04. 2007 v 12:32 +0100: > > > Hi > > > > > > I think I have found a fix for this but I wonder whether it breaks > > > anything else. > > > > > > In some (probably rare) cases AA uses QUERY_STRING_UNESCAPED. In there > > > the brackets of als get escape -- als\[bla\] and teh following > > > parse_str call will ignore the als. > > > > > > I have made a change in the function shtml_query_string - util.php3, > > > 162 > > > > > > $ret_string = ($REQUEST_URI AND strpos($REQUEST_URI, '?')) ? > > > > > > substr($REQUEST_URI, strpos($REQUEST_URI, '?')+1) : > > > > > > ( isset($REDIRECT_QUERY_STRING_UNESCAPED) ? > > > > > > $REDIRECT_QUERY_STRING_UNESCAPED : > > > > > > stripslashes($QUERY_STRING_UNESCAPED) ); > > > > > > And now it works. Can someone check this / check it into SVN if it's > > > ok. I'm not sure I have SVN access. > > > > > > thanks > > > > > > mimo > > > > > > On Thursday 08 February 2007 18:24, Michael Moritz wrote: > > > > Hi > > > > > > > > > > > > > > > > By now I'm thinking this is a bug in AA. We run aa-2.10.0 > > > > > > > > > > > > > > > > Using my RewriteRule and redirecting to phpinfo displays the correct > > > > > > als. > > > > > > > Redirecting to view.php3 adds the two backslashes. I think what > > > > > > happens is > > > > > > > that in case of being called by <!--#include="/apc-aa/view.php3"--> > > > > > > > > ActionApps tries to parse the $_SERVER['QUERY_STRING'] and gets it > > > > > > wrong > > > > > > > for some reason. > > > > > > > > > > > > > > > > Michael > > > > > > > > On Wednesday 07 February 2007 11:34, Michael Moritz wrote: > > > > > Hi > > > > > > > > > > > > > > > > > > > > I am experimenting with mod_rewrite to make AA URLs more readable > > > > > > and > > > > > > > > also parseable for log file analysers. Now I have run into what > > > > > > seems a > > > > > > > > silly problem: > > > > > > > > > > > > > > > > > > > > If you have a rule like this > > > > > > > > > > > > > > > > > > > > RewriteRule ^/sub-440625 > > > > > > $ /sub.shtml?als[cid]=440624&debug=1&nocache=1 > > > > > > > > [NE] > > > > > > > > > > > > > > > > > > > > it reaches AA/PHP as > > > > > > > > > > > > > > > > > > > > Starting view > > > > > > > > > > ParseViewParameters: vid=XXX, query_string=cmd:set:als:Array > > > > > > ( [cid\] => > > > > > > > > 440624\ > > > > > > > > > > > > > > > > > > > > Note the two trailing backslashes. It seems to be caused by the > > > > > > square > > > > > > > > brackets > > > > > > > > > > > > > > > > > > > > Any ideas how to fix this? > > > > > > > > > > > > > > > > > > > > Thanks, > > > > > > > > > > > > > > > > > > > > Michael > > > > > > ------------------------------------------------------------------------- > > > > > > > > Using Tomcat but need to do more? Need to support web services, > > > > > > security? > > > > > > > > Get stuff done quickly with pre-integrated technology to make your > > > > > > job > > > > > > > > easier. Download IBM WebSphere Application Server v.1.0.1 based on > > > > > > Apache > > > > > > > > Geronimo > > > > > > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > > > > > > > > _______________________________________________ > > > > > > > > > > "Did you get answers to your ActionApps-related queries? If yes, > > > > > > please > > > > > > > > help the ActionApps community by uploading the answers onto > > > > > > appropriate > > > > > > > > space in the ActionApps documentation wiki. See the *How to > > > > > > contribute* > > > > > > > > section today http://actionapps.org/en/How_To_Contribute" > > > > > > > > > > _______________________________________________ > > > > > > > > > > apc-aa-general mailing list > > > > > > > > > > apc...@li... > > > > > > > > > > https://lists.sourceforge.net/lists/listinfo/apc-aa-general > > > > > > ------------------------------------------------------------------------- > > > > > > > Using Tomcat but need to do more? Need to support web services, > > > > > > security? > > > > > > > Get stuff done quickly with pre-integrated technology to make your > > > > > > job > > > > > > > easier. Download IBM WebSphere Application Server v.1.0.1 based on > > > > > > Apache > > > > > > > Geronimo > > > > > > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > > > > > > > _______________________________________________ > > > > > > > > Apc-aa-coders mailing list > > > > > > > > Apc...@li... > > > > > > > > https://lists.sourceforge.net/lists/listinfo/apc-aa-coders > > > > > > ------------------------------------------------------------------------- > > > Take Surveys. Earn Cash. Influence the Future of IT > > > Join SourceForge.net's Techsay panel and you'll get the chance to share > > > your opinions on IT & business topics through brief surveys-and earn cash > > > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > > > _______________________________________________ Apc-aa-coders mailing > > > list Apc...@li... > > > https://lists.sourceforge.net/lists/listinfo/apc-aa-coders > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > _______________________________________________ > Apc-aa-coders mailing list > Apc...@li... > https://lists.sourceforge.net/lists/listinfo/apc-aa-coders > -- |