Short: thttpd v2.25b Author: acme@acme.com Uploader: djbase gmx de Type: comm/www Version: 2.25b Replaces: dev/gg/thttpd_2.25b.lha Architecture: ppc-morphos thttpd is a simple, small, portable, fast, and secure HTTP server. Port by DJBase - More stuff available at http://www.amigaworld.de ----------------------------------------- New in version 2.25b: o Move fdwatch initialization before the chroot, so that /dev/poll can work. o Multiple fdwatch cleanups and fixes (Adam Zell).New in version 2.25: o Prohibit "Host: ." and "Host: .." (David Leadbeater). o Don't free memory prematurely on SIGUSR1 (A.D.F.). o Use the specified charset in directory listings and errors (Jonas Ohlsson). o Lowered THROTTLE_TIME from 60 seconds to 2 seconds, plus more aggressivecomputation of sending rate, to improve throttle reaction time (E Frank Ball). o Added code to redistribute the throttled bandwidth fairly among the currentlysending connections. o Some more throttling changes that smooth things out a lot. o Added an experimental limitation on the number of simultaneous CGIs. o Chown the log file when starting as root, so that it can later be re-openedwhen running as nobody (or whatever user you configure). Also tweak the logfilepathname so that it still works inside a chroot tree. o Make sure URL paths begin with a slash. o Generate multiple MIME encodings in the correct order, and with the correctseparator. o Ignore EINTR on read() and write(). o Fix error in httpd_read_fully() and httpd_write_fully() that could causeincorrect data to be read or written (Daniel Jensen). o Don't attempt to double-free a file descriptor if a connection times outwhile it is paused for throttling. o Save and restore errno in signal handlers. o The non-local referer check is no longer fooled by URLs with query strings. o Simplified handling of HAVE_INT64T (Trisk). If this causes problems, e.g. ifthere are still systems which don't have "long long", we can back out thechange. o Keep a list of free connection structs, instead of doing linear search tofind a free one (Adam Zell). o Added config.h option FLUSH_LOG_EVERY_TIME - if it's turned off, the log doesnot get fflushed after each request (Adam Zell). o Multiple robustness improvements to the fdwatch module (Adam Zell). o Added /dev/poll support to fdwatch (Adam Zell). o Automatically add no-cache control header on error responses.New in version 2.24: o Added a bunch of MIME types. o Fix minor problem with returning unknown protocol on some errors. o Changed the config-file option for diabling symlink checking from "nosymlink"to "nosymlinkcheck" to make its function clearer. o Allow blank lines in the config file. o Handle more than one SIGHUP and SIGUSR2 (Cameron Gregory). o Slight change to handle_newconnect() to better deal with unexpected errorsfrom accept(), such as running out of file descriptors (Alex Keahan). o Added optional minimum rate to throttles. o Stats syslog messages downgraded from LOG_NOTICE to LOG_INFO. o Use unsigned short consistently for port number. o Prohibit slashes in the Host: header (Marcus Breiing). o Added a -dd data_dir flag and corresponding config-file option. o Got rid of the old timer-based zombie process reaper, replacing it with aSIGCHLD handler. o Changed the idle connection checking from using a separate timer for eachconnection to using a single timer that checks all active connections. o Correction to missing-slash directory redirect with query string. o Added a watchdog alarm handler that forces a core dump if thttpd stopsrunning its timers for too long. o Don't send Content-Length header on 304 Not Modified responses. o Allow user-agent log entries to be up to 200 characters long, instead only of80. o Fixed buffer overflow bug in defang(). o Re-arranged the order of calling de_dotdot() so that it doesn't get appliedto query strings. o Some fixes for the syslogtocern script (paul fox). o Changed configure script to use "gcc -dumpversion" instead of "gcc --version"(Ed Goforth). o Changed most uses of r and n to 15 and 12 (Jens Bauer). o In ssi.c, lack of PATH_INFO is now non-fatal (David Phillips). o Some improvements to fdwatch (David Burgess).