similar to: how to translate request.params[''PATH_INFO''] into physical file

Hi Marius, Will make the changes and see how it goes. On the other hand https://cbs.centos.org/koji/buildinfo?buildID=27138 if the above was released we could just install and migrate to rh-php73-php, which is not affected as per https://access.redhat.com/security/cve/cve-2019-11043 thanks --- Thomas Stephen Lee On Thu, Oct 31, 2019 at 8:40 PM Marius ROMAN <marius at roman.systems>

A couple of questions please: What is the benefit of having more than one Mongrel/Rails instance on the same machine, could one instance not serve as many requests as say three instances? Is Mongrel Cluster a Apache add-in (like mod_*) or a separately running load balancer which runs on a separate port, I could not work it out from the sample Apache config... |# Redirect all non-static

in one of my recent email, I add .to_s to PATH_INFO in camping code. actually, this is probably very wrong. the problem is probably something like PATH_INFO does not exist when using FastCGI. I have not done all my homework, but so far what I found is lighttpd has a special option "broken-scriptfilename": breaks SCRIPT_FILENAME in a wat that PHP can extract PATH_INFO from it (default:

Hi, I''m halfway developing a tiny plugin that allows people to scrub flash video files. I''ve got my plugin setup to monitor a directory /movies. Whenever a .flv file is requested within that directory, some stuff should happen, if not, the request should be processed as usual. I don''t know how to do the latter.. require ''mongrel'' require

Full_Name: Huan Huang Version: 1.9.1 OS: Win NT Submission from: (NULL) (155.140.122.227) Traceback: Traceback (most recent call last): File "/scratch/local/app/mailman-sfs/2.1.5/scripts/driver", line 87, in run_main main() File "/scratch/local/app/mailman-sfs/2.1.5/Mailman/Cgi/options.py", line 91, in main language = cgidata.getvalue('language') File

Hi, what is the workaround for this? https://www.nginx.com/blog/php-fpm-cve-2019-11043-vulnerability-nginx/ in either CentOS 7 or 8 ? thanks --- Thomas Stephen Lee

Hi ! Has anyone got any tips/tricks on running a Productized Rails app on DreamHost ? Specifically, I get this in my error.log: ----------- [Mon Oct 10 11:39:46 2005] [error] [client 69.70.225.69] mod_rewrite: maximum number of internal redirects reached. Assuming configuration error. Use ''RewriteOptions MaxRedirects'' to increase the limit if neccessary. ----------- As

Hey all, First off, thanks to Rick Olson and whoever else was involved with this plugin... It''s been amazingly easy to implement. I''ve got a question about the path_info parameter, though... It seems that unless the request PATH_INFO exactly matches the path_info passed in to the plugin at inclusion, it won''t actually trigger Add and add the upload to the list of

Hi, Are there any recommendations as to what is currently the most stable setup is for mongrel & apache? I read somewhere (probably here) that you should avoid using PStore for sessions. Are there any more of such recommendations? Also, what is currently the safest version of mongrel to use in production? Jeroen

On 10/31/19 10:49 AM, Thomas Stephen Lee wrote: > Hi, > > what is the workaround for this? > > https://www.nginx.com/blog/php-fpm-cve-2019-11043-vulnerability-nginx/ > > in either CentOS 7 or 8 ? > > thanks > > --- > Thomas Stephen Lee > _______________________________________________ > CentOS mailing list > CentOS at centos.org >

On 10/31/19 6:55 PM, Thomas Stephen Lee wrote: > Hi Marius, > > Will make the changes and see how it goes. > > On the other hand > > https://cbs.centos.org/koji/buildinfo?buildID=27138 > > if the above was released we could just install and migrate to > rh-php73-php, which is not affected as per > > https://access.redhat.com/security/cve/cve-2019-11043 > >

On Fri, Nov 1, 2019 at 5:08 AM Marius ROMAN <marius at roman.systems> wrote: > On 10/31/19 6:55 PM, Thomas Stephen Lee wrote: > > Hi Marius, > > Will make the changes and see how it goes. > > On the other hand > https://cbs.centos.org/koji/buildinfo?buildID=27138 > > if the above was released we could just install and migrate to > rh-php73-php, which is not

Hi, Disclaimer: I''m pretty sure this isn''t a mongrel issue, as I''m pretty sure I had the same problem back in the lighty-fastcgi days.. After a postgres restart, my rails apps crash with this error: ActiveRecord::StatementInvalid (PGError: FATAL: terminating connection due to a dministrator command server closed the connection unexpectedly This probably

Hi There! I''d like some feedback before I try to implement some funky rails routes based on an acts_as_tree model. I have a Page model that acts_as_tree. I''d like the URLs to look something like this: http://localhost/about-us/staff/jeff or, another example... http://localhost/what-we-do/products/our-great-cms/features/faqs/ So, as many sub-nodes the user creates,

Howdy, I am using the ''default'' Apache 2.2 mod_rewrite rules suggested from the Web site and they are working. One thing related to static (non cluster directed) resources: If I have a directory in public called ''static'', if I request it as follows: http://www.domain.com/static/ - then it works If I request it as: http://www.domain.com/static - then it

This GemPlugin will gzip your HTTP responses from mongrel if the client says that it supports it (eg, most modern browsers). I''ve tested it in IE6, Firefox 1.5 and Firefox 2.0RC3 Install: gem install gzip_filter --source http://edenli.com Configure (assuming rails): cd RAILS_ROOT echo ''uri "/", :handler => plugin("/handlers/gzipfilter")''

Howdy. I''m working on a RoR CMS and need cached pages to all be in public/cache rather than public [in order to set svn:ignore on all the files properly]. I can get page_cache_directory set correctly and the pages are cached in the right place but Mongrel isn''t serving them because it''s only looking for them in public. During development I know I can set -r public/cache

It seems that Merb is sending static files with Mongrel::DirHandler. (mongrel_handler.rb:52) if get_or_head and @files.can_serve(path_info) # File exists as-is so serve it up MERB_LOGGER.info("Serving static file: #{path_info}") @files.process(request,response) I haven''t done benchmarks and I''ve hardly glanced at DirHandler''s code but the

I just found a vulnerability in one of my web apps that was running Mongrel 1.1.2 where I could go to URIs like /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd and it would serve the actual /etc/passwd file. The issue seems to be in lib/mongrel/handlers.rb in the change from 1.0.3 to 1.0.4 req_path = HttpRequest.unescape(path_info) - if @path - req_path =

Bug in Mailman version 2.1.5 We're sorry, we hit a bug! If you would like to help us identify the problem, please email a copy of this page to the webmaster for this site with a description of what happened. Thanks! Traceback: Traceback (most recent call last): File "/var/mailman/scripts/driver", line 87, in run_main main() File