Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 89858 - http://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml?passthru=1
Summary: http://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml?passthru=1
Status: RESOLVED FIXED
Alias: None
Product: Websites
Classification: Unclassified
Component: Other (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: Lance Albertson (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-04-20 12:49 UTC by Grant Goodyear (RETIRED)
Modified: 2006-10-10 14:50 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Grant Goodyear (RETIRED) gentoo-dev 2005-04-20 12:49:03 UTC
http://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml is accessible w/ 
passthru=1 to get the raw data stored in it.  Of course, it's also available in CVS.
Comment 1 Lance Albertson (RETIRED) gentoo-dev 2005-05-22 18:14:17 UTC
Currently working on getting this implemented. I have a new setup for updating
www nodes working at home and I just got the viewcvs side of working. the
passthru stuff should be pretty easy via apache. I hope to get this implemented
in a few weeks!
Comment 2 Lance Albertson (RETIRED) gentoo-dev 2005-05-23 21:00:04 UTC
Nesyx: Does all passthru commands go through gorg before hitting any rewrite
rules or Location directives?

I'm having one hell of a time getting this to work. This is the rewrite rule I
tried:

RewriteRule ^/proj/en/devrel/roll-call/userinfo.xml?passthru=1 - [F]

I even tried escaping the ? and . still no luck.

I also tried:

<Location /proj/en/devrel/roll-call/userinfo.xml?passthru=1>
    Order deny,allow
    Deny from all
</Location>

But that appears to have no affect either. Am I missing something here?

Thanks for any input!
Comment 3 Lance Albertson (RETIRED) gentoo-dev 2005-05-23 22:16:30 UTC
Ok, thanks to chipig on freenode, I got this figured out. Apparently RewriteRule
doesn't apply to any query string urls and you need to use a RewriteCond in
front it. I got it working well at home using the rule below! 

# Files we don't want their content being viewed in full XML form
RewriteCond %{QUERY_STRING} passthru=1
RewriteRule ^/proj/en/devrel/roll-call/userinfo.xml - [F]

Grant: Is there any other files other than userin.xml we don't want visible to
the world?
Comment 4 Lance Albertson (RETIRED) gentoo-dev 2005-05-24 11:24:49 UTC
Ok, I just went ahead and implemented the rules on all three nodes while I still
work on my planned upgrade. Both viewcvs and the passthru commands for this file
should be disabled. 
Comment 5 Lance Albertson (RETIRED) gentoo-dev 2005-06-03 23:05:27 UTC
Just FYI for you devrel folks. Forgot to include you in on this.
Comment 6 Tim Yamin (RETIRED) gentoo-dev 2005-06-19 03:21:51 UTC
Nope, userinfo.xml should be it for now. Thanks Lance!
Comment 7 Grant Goodyear (RETIRED) gentoo-dev 2006-10-10 14:50:20 UTC
Closing