[cgiwrap-users] new features in cgiwrap cvs

[Neulinger, N. <nn...@um...>]

A few new features have been committed to cvs build of cgiwrap in the
past week or so. Here's a snippet from changes.html:


  New in version 3.8:

     * Merged in special handling for PHP scripts by popular demand.
This
       is  based  mostly  on Piotr Klaban's php-cgiwrap patch, with
minor
       changes.
     * Added   options   for   php  support.  --with-php-interpreter
and
       --with-php-cgiwrap
     * Rewrote the path translated support. Is it finally correct?
     * Patch  from  sa...@co...  to use REDIRECT_URL if
available
       for SCRIPT_NAME.

stuff added recently:
     * Added support for access control files specific to each
HTTP_HOST,
       useful  for  ISP's using Apache handlers to run cgi's that want
to
       restrict  which  userids  can  run  cgi's  on  certain  vhosts.
If
       enabled, the vhost access control files must exist.
     * Added   option  to  require  that  REDIRECT_URL  be  specified
in
       environment.  Can be used to require that cgiwrap be invoked via
a
       handler/action  or some other internal apache
redirection/rewrite.
       Primarily  of  use  when  invoking  cgi's  for  virtual  hosts
via
       Action/SetHandler.
     * Modified  san's REDIRECT_URL support to be
--with-use-redirect-url
       instead of --with-check-redirect-url, since it's more a
functional
       change, not a security check.
     * Added   a   --with-quiet-errors   option  to  allow
significantly
       restricting  the  amount  of  internal  information  that an
error
       message displays.
     * Added  ability  to  override  the  vhost that cgiwrap users via
an
       optional  CGIWRAP_AUTH_VHOST env var, which if present and
feature
       enabled,  will  be  used  instead of HTTP_HOST. This is useful
for
       when   you   have  wildcard  servernames  in  apache.  Enable
the
       --with-vhost-override  option  if  you want this capabillity.
Only
       applicable if vhost allow/deny dir is enabled.
     * Added  ability  to  only allow scripts run by a specific userid
if
       the   CGIWRAP_REQUIRE_USER   env   var   is   specified   and
the
       --with-env-require-user feature is enabled.

These changes are mostly of use to folks that are doing managed
hosting/virtual hosts/etc. with cgiwrap behind the scenes.=20

As soon as the sponsor of these changes is finished testing them, I'll
probably try and do a 3.8 release tarball.=20

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nn...@um...
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216