search for: omega_config_fil

...DB=$1&FMT=docoll [L] </Directory> <Directory /usr/lib/cgi-bin/omega> # Ensure required settings in case defaults have been changed [snip] RewriteEngine On RewriteBase / RewriteCond %{QUERY_STRING} (&|^)DB=([^&]*)& RewriteRule .* - [env=OMEGA_CONFIG_FILE:/etc/opt/docoll/%2/search/omega.conf] [L] </Directory> Explanation ... First the default case ... For a clean user interface, the user can access the default instance by browsing http://<server ID>/docoll. This matches the first RewriteRule so calls /cgi-bin/omega/omega with DB=def...

...ues. Reading a configuration file from the current working directory seems bad practice to me, and could be a potential, albeit small, security risk; care needs to be taken to avoid serving the file to clients. I propose changing the configuration file search to read an environment variable "OMEGA_CONFIG_FILE". If this is set, the configuration will be read from the file whose path is in the environment variable. If this is not set, the configuration will be read from $sysconfdir/omega.conf (where $sysconfdir defaults to /etc, but can be set by parameters to ./configure). If the configuration f...