Version History

1.0a4

• Introduced user authentication (Basic scheme)
• Multiple script directories now supported
• Fixed bug in http_request.c related to clients not sending a method
• Fixed bug in http_request.c which caused DirectoryIndex to be ignored and index.html to be used anyway
• Added overrule for mime types in srm.conf and access config. so the user doesn't have to edit mime.types
• Requests for directories which do not come with a trailing slash and will return a prewritten index are now redirected to the same URL with a trailing slash
• The HEAD method is now supported
• Fixed a getline call which was hardcoded to 1024 instead of HUGE_STRING_LEN
• Fixed problem in which a user could GET /~user/../../../ and gain access outside of DocumentRoot
• httpd.conf split into two files: a server configuration and a document configuration file
• Introduced Redirect directive which allows you to redirect clients to documents' new locations
• Introduced htpasswd program for managing user authentication
• Fixed problems in http_access.c where certain .htaccess files were ignored and some symlinks were being followed when they shouldn't have
• Distribution now places config files as foo.conf-dist instead of foo.conf so it doesn't write over your old files
• Config files now case insensitive
• MIME header scans are now case insensitive per the RFC
• Added server config. diretive Timeout to control the timeouts when listening to or writing to a client
• Script execution now uses execl() instead of system() to eliminiate extra tmp files and to allow system() from scripts.
• New document config. directive DefaultType for type of files which cannot be typed from filename
• Script arguments now not touched: Added support program to decode them for shell scripts
• Added support for the post method of accessing forms
• Added support for "extra path" in script name
• Fixed so that an un-executable script now returns FORBIDDEN instead of blank page
• Spaces in content type returned from scripts no longer included, so include files now work from imagerect script.
• Thanks to Arjan de Vet, script execution no longer uses system() or popen(), reducing chroot requirements as well as allowing scripts to use system().
• Added DefaultType directive to define what type a document with an unknown or missing extension should be
• Added Timeout directive to allow servers to choose the length of time a client is given to send a request and to recieve the data.
• Added preliminary support for POST scripts, or more importantly, support for scripts which interpret the new form submission methods.
• Scripts now do all of their own URL decoding, which can be done either with provided C code, or with the support program unescape
• Scripts may now have extra path information after the script name, so allowing filters
• Improved Imagerect Script
• Allowed non-URL location returns from script to allow access control, user authentication, and typing (great idea, Ari).
• Returning content-length and last-modified headers

1.0a3

• .htaccess files now affect subdirectories
• Added option FollowSymLinks for security
• Fixed MAJOR bug in init_mime function
• Enhanced Makefile and httpd.h for people compiling httpd themselves
• Added env. vars DOCUMENT_ROOT and SERVER_NAME for scripts

1.0a2

• Introduced support for HTTP/1.0 3xx redirection from server scripts
• Introduced per-directory access by host and options control
• Added flags for BSD 4.2 compatibility (no killpg and no setsid)
• Enhanced documentation
• Introduced support for server restart through SIGHUP
• Fixed bug which caused system not to return port when httpd is done
• Fixed bug which caused server to go into infinite spin with GET /htbin
• Bug in directory indexing repaired (thanks to neal@ctd.comsat.com).
• Added timeout while sending data to client so as to alleviate zombie servers laying around when the client drops.

1.0a1

• Introduced server scripts
• Server scripts for a variety of UNIX commands like archie added
• Server-side forms handling scripts added
• Image rectangling scripts added
• Introduced more extensible configuration file format
• Server now replies to HTTP/1.0 clients in HTTP/1.0 format
• Introduced MIME data type determination on the fly
• Improved logging of client access as well as server errors
• Major internal reworking
• Added timeout for clients that disconnect
• Added server include files

Version 0.5

• Introduced standalone support
• Final release for gopher support and experimental group annotation support
• No reported outstanding bugs

Beta Version 0.4

• Introduced experimental group annotation support
• Introduced access logging
• Introduced HTTP/1.0 tolerance
• Handling of full hostnames added
• Bug fixed with index.html not being recognized without a trailing slash
• Fixed bug with extraneous character being added to the end of the data stream
• Fixed bug handling directory URL's with trailing slashes
• Made a little more friendly to Ultrix's brain death

Beta Version 0.3

• Introduced drop-in gopher support
• Fixed security hole
• Not being able to find the config file does not send back a path

Beta version 0.2

• Two security holes fixed
• Double slashes in index of root fixed
• Not being able to find error files no longer hangs the server

Return to the Overview.