IdentifiantMot de passe
Loading...
Mot de passe oublié ?Je m'inscris ! (gratuit)
Navigation

Inscrivez-vous gratuitement
pour pouvoir participer, suivre les réponses en temps réel, voter pour les messages, poser vos propres questions et recevoir la newsletter

Apache Discussion :

Exécution des fichiers sans extension


Sujet :

Apache

  1. #1
    Membre à l'essai
    Profil pro
    Inscrit en
    Juillet 2006
    Messages
    27
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Juillet 2006
    Messages : 27
    Points : 19
    Points
    19
    Par défaut Exécution des fichiers sans extension
    Bonjour,

    J'ai un problème avec la configuration de mon serveur Apache et PHP.

    Je peux accéder à l'URL http://monsite.com/page.php, cela fonctionne très bien.
    Si j'essaie d'accéder à http://monsite.com/page, le serveur m'envoie le fichier page.php SANS interpréter le fichier.

    Plutôt embettant car on arrive facilement à voir les mots de passe de la base de données.

    Auriez-vous une solution ?

    Apache est installé avec apt-get install apache2 (ou du genre).
    PHP est installé en CGI (et pas module) pour pouvoir utiliser suphp.

    Voici mon apache2.conf :

    Code : Sélectionner tout - Visualiser dans une fenêtre à part
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    54
    55
    56
    57
    58
    59
    60
    61
    62
    63
    64
    65
    66
    67
    68
    69
    70
    71
    72
    73
    74
    75
    76
    77
    78
    79
    80
    81
    82
    83
    84
    85
    86
    87
    88
    89
    90
    91
    92
    93
    94
    95
    96
    97
    98
    99
    100
    101
    102
    103
    104
    105
    106
    107
    108
    109
    110
    111
    112
    113
    114
    115
    116
    117
    118
    119
    120
    121
    122
    123
    124
    125
    126
    127
    128
    129
    130
    131
    132
    133
    134
    135
    136
    137
    138
    139
    140
    141
    142
    143
    144
    145
    146
    147
    148
    149
    150
    151
    152
    153
    154
    155
    156
    157
    158
    159
    160
    161
    162
    163
    164
    165
    166
    167
    168
    169
    170
    171
    172
    173
    174
    175
    176
    177
    178
    179
    180
    181
    182
    183
    184
    185
    186
    187
    188
    189
    190
    191
    192
    193
    194
    195
    196
    197
    198
    199
    200
    201
    202
    203
    204
    205
    206
    207
    208
    209
    210
    211
    212
    213
    214
    215
    216
    217
    218
    219
    220
    221
    222
    223
    224
    225
    226
    227
    228
    229
    230
    231
    232
    233
    234
    235
    236
    237
    238
    239
    240
    241
    242
    243
    244
    245
    246
    247
    248
    249
    250
    251
    252
    253
    254
    255
    256
    257
    258
    259
    260
    261
    262
    263
    264
    265
    266
    267
    268
    269
    270
    271
    272
    273
    274
    275
    276
    277
    278
    279
    280
    281
    282
    283
    284
    285
    286
    287
    288
    289
    290
    291
    292
    293
    294
    295
    296
    297
    298
    299
    300
    301
    302
    303
    304
    305
    306
    307
    308
    309
    310
    311
    312
    313
    314
    315
    316
    317
    318
    319
    320
    321
    322
    323
    324
    325
    326
    327
    328
    329
    330
    331
    332
    333
    334
    335
    336
    337
    338
    339
    340
    341
    342
    343
    344
    345
    346
    347
    348
    349
    350
    351
    352
    353
    354
    355
    356
    357
    358
    359
    360
    361
    362
    363
    364
    365
    366
    367
    368
    369
    370
    371
    372
    373
    374
    375
    376
    377
    378
    379
    380
    381
    382
    383
    384
    385
    386
    387
    388
    389
    390
    391
    392
    393
    394
    395
    396
    397
    398
    399
    400
    401
    402
    403
    404
    405
    406
    407
    408
    409
    410
    411
    412
    413
    414
    415
    416
    417
    418
    419
    420
    421
    422
    423
    424
    425
    426
    427
    428
    429
    430
    431
    432
    433
    434
    435
    436
    437
    438
    439
    440
    441
    442
    443
    444
    445
    446
    447
    448
    449
    450
    451
    452
    453
    454
    455
    456
    457
    458
    459
    460
    461
    462
    463
    464
    465
    466
    467
    468
    469
    470
    471
    472
    473
    474
    475
    476
    477
    478
    479
    480
    481
    482
    483
    484
    485
    486
    487
    488
    489
    490
    491
    492
    493
    494
    495
    496
    497
    498
    499
    500
    501
    502
    503
    504
    505
    506
    507
    508
    509
    510
    511
    512
    513
    514
    515
    516
    517
    518
    519
    520
    521
    522
    523
    524
    525
    526
    527
    528
    529
    530
    531
    532
    533
    534
    535
    536
    537
    538
    539
    540
    541
    542
    543
    544
    545
    546
    547
    548
    549
    550
    551
    552
    553
    554
    555
    556
    557
    558
    559
    560
    561
    562
    563
    564
    565
    566
    567
    568
    569
    570
    571
    572
    573
    574
    575
    576
    577
    578
    579
    580
    581
    582
    583
    584
    585
    586
    587
    588
    589
    590
    591
    592
    593
    594
    595
    596
    597
    598
    599
    600
    601
    602
    603
    604
    605
    606
    607
    608
    609
    610
    611
    612
    613
    614
    615
    616
    617
    618
    619
    620
    621
    622
    623
    624
    625
    626
    627
    628
    629
    630
    631
    632
    633
    634
    635
    636
    637
    638
    639
    640
    641
    642
    643
    644
    645
    646
    647
    648
    649
    650
    651
    652
    653
    654
    655
    656
    657
    658
    659
    660
    661
    662
    663
    664
    665
    666
    667
    668
    669
     
    #
    # Based upon the NCSA server configuration files originally by Rob McCool.
    #
    # This is the main Apache server configuration file.  It contains the
    # configuration directives that give the server its instructions.
    # See <URL:http://httpd.apache.org/docs-2.1/> for detailed information about
    # the directives.
    #
    # Do NOT simply read the instructions in here without understanding
    # what they do.  They're here only as hints or reminders.  If you are unsure
    # consult the online docs. You have been warned.
    #
    # The configuration directives are grouped into three basic sections:
    #  1. Directives that control the operation of the Apache server process as a
    #     whole (the 'global environment').
    #  2. Directives that define the parameters of the 'main' or 'default' server,
    #     which responds to requests that aren't handled by a virtual host.
    #     These directives also provide default values for the settings
    #     of all virtual hosts.
    #  3. Settings for virtual hosts, which allow Web requests to be sent to
    #     different IP addresses or hostnames and have them handled by the
    #     same Apache server process.
    #
    # Configuration and logfile names: If the filenames you specify for many
    # of the server's control files begin with "/" (or "drive:/" for Win32), the
    # server will use that explicit path.  If the filenames do *not* begin
    # with "/", the value of ServerRoot is prepended -- so "/var/log/apache2/foo.log"
    # with ServerRoot set to "" will be interpreted by the
    # server as "//var/log/apache2/foo.log".
    #
     
    ### Section 1: Global Environment
    #
    # The directives in this section affect the overall operation of Apache,
    # such as the number of concurrent requests it can handle or where it
    # can find its configuration files.
    #
     
    #
    # ServerRoot: The top of the directory tree under which the server's
    # configuration, error, and log files are kept.
    #
    # NOTE!  If you intend to place this on an NFS (or otherwise network)
    # mounted filesystem then please read the LockFile documentation (available
    # at <URL:http://httpd.apache.org/docs-2.1/mod/mpm_common.html#lockfile>);
    # you will save yourself a lot of trouble.
    #
    # Do NOT add a slash at the end of the directory path.
    #
    ServerRoot "/etc/apache2"
     
    #
    # The accept serialization lock file MUST BE STORED ON A LOCAL DISK.
    #
    #<IfModule !mpm_winnt.c>
    #<IfModule !mpm_netware.c>
    LockFile /var/lock/apache2/accept.lock
    #</IfModule>
    #</IfModule>
     
    #
    # PidFile: The file in which the server should record its process
    # identification number when it starts.
    #
    PidFile /var/run/apache2.pid
     
    #
    # Timeout: The number of seconds before receives and sends time out.
    #
    Timeout 300
     
    #
    # KeepAlive: Whether or not to allow persistent connections (more than
    # one request per connection). Set to "Off" to deactivate.
    #
    KeepAlive On
     
    #
    # MaxKeepAliveRequests: The maximum number of requests to allow
    # during a persistent connection. Set to 0 to allow an unlimited amount.
    # We recommend you leave this number high, for maximum performance.
    #
    MaxKeepAliveRequests 100
     
    #
    # KeepAliveTimeout: Number of seconds to wait for the next request from the
    # same client on the same connection.
    #
    KeepAliveTimeout 15
     
    ##
    ## Server-Pool Size Regulation (MPM specific)
    ##
     
    # prefork MPM
    # StartServers: number of server processes to start
    # MinSpareServers: minimum number of server processes which are kept spare
    # MaxSpareServers: maximum number of server processes which are kept spare
    # MaxClients: maximum number of server processes allowed to start
    # MaxRequestsPerChild: maximum number of requests a server process serves
    <IfModule mpm_prefork_module>
        StartServers          10
        MinSpareServers       30
        MaxSpareServers      100
        MaxClients           255
        MaxRequestsPerChild   10000
    </IfModule>
     
    # worker MPM
    # StartServers: initial number of server processes to start
    # MaxClients: maximum number of simultaneous client connections
    # MinSpareThreads: minimum number of worker threads which are kept spare
    # MaxSpareThreads: maximum number of worker threads which are kept spare
    # ThreadsPerChild: constant number of worker threads in each server process
    # MaxRequestsPerChild: maximum number of requests a server process serves
    <IfModule mpm_worker_module>
        StartServers          2
        MaxClients          10
        MinSpareThreads      25
        MaxSpareThreads      75
        ThreadsPerChild      25
        MaxRequestsPerChild   0
    </IfModule>
     
    User www-data
    Group www-data
     
    #
    # AccessFileName: The name of the file to look for in each directory
    # for additional configuration directives.  See also the AllowOverride
    # directive.
    #
     
    AccessFileName .htaccess
     
    #
    # The following lines prevent .htaccess and .htpasswd files from being
    # viewed by Web clients.
    #
    <Files ~ "^\.ht">
        Order allow,deny
        Deny from all
    </Files>
     
    TypesConfig /etc/mime.types
     
    #
    # DefaultType is the default MIME type the server will use for a document
    # if it cannot otherwise determine one, such as from filename extensions.
    # If your server contains mostly text or HTML documents, "text/plain" is
    # a good value.  If most of your content is binary, such as applications
    # or images, you may want to use "application/octet-stream" instead to
    # keep browsers from trying to display binary files as though they are
    # text.
    #
    #DefaultType text/plain
     
     
    #
    # HostnameLookups: Log the names of clients or just their IP addresses
    # e.g., <a href="http://www.apache.org" target="_blank">www.apache.org</a> (on) or 204.62.129.132 (off).
    # The default is off because it'd be overall better for the net if people
    # had to knowingly turn this feature on, since enabling it means that
    # each client request will result in AT LEAST one lookup request to the
    # nameserver.
    #
    HostnameLookups Off
     
    # ErrorLog: The location of the error log file.
    # If you do not specify an ErrorLog directive within a <VirtualHost>
    # container, error messages relating to that virtual host will be
    # logged here.  If you *do* define an error logfile for a <VirtualHost>
    # container, that host's errors will be logged there and not here.
    #
    ErrorLog /var/log/apache2/error.log
     
    #
    # LogLevel: Control the number of messages logged to the error_log.
    # Possible values include: debug, info, notice, warn, error, crit,
    # alert, emerg.
    #
    LogLevel warn
     
    # Include module configuration:
    Include /etc/apache2/mods-enabled/*.load
    Include /etc/apache2/mods-enabled/*.conf
     
    # Include all the user configurations:
    Include /etc/apache2/httpd.conf
     
    # Include ports listing
    Include /etc/apache2/ports.conf
     
    # Include generic snippets of statements
    Include /etc/apache2/conf.d/
     
    #
    # The following directives define some format nicknames for use with
    # a CustomLog directive (see below).
    #
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    LogFormat "%{Referer}i -> %U" referer
    LogFormat "%{User-agent}i" agent
     
    #
    # ServerTokens
    # This directive configures what you return as the Server HTTP response
    # Header. The default is 'Full' which sends information about the OS-Type
    # and compiled in modules.
    # Set to one of:  Full | OS | Minor | Minimal | Major | Prod
    # where Full conveys the most information, and Prod the least.
    #
    ServerTokens Prod
     
    #
    # Optionally add a line containing the server version and virtual host
    # name to server-generated pages (internal error documents, FTP directory
    # listings, mod_status and mod_info output etc., but not CGI generated
    # documents or custom error documents).
    # Set to "EMail" to also include a mailto: link to the ServerAdmin.
    # Set to one of:  On | Off | EMail
    #
    ServerSignature Off
     
    <IfModule alias_module>
        #
        # Aliases: Add here as many aliases as you need (with no limit). The format is
        # Alias fakename realname
        #
        # Note that if you include a trailing / on fakename then the server will
        # require it to be present in the URL.  So "/icons" isn't aliased in this
        # example, only "/icons/".  If the fakename is slash-terminated, then the
        # realname must also be slash terminated, and if the fakename omits the
        # trailing slash, the realname must also omit it.
        #
        # We include the /icons/ alias for FancyIndexed directory listings.  If
        # you do not use FancyIndexing, you may comment this out.
        #
        Alias /icons/ "/usr/share/apache2/icons/"
     
        <Directory "/usr/share/apache2/icons">
            Options Indexes Multiviews
            AllowOverride None
            Order allow,deny
            Allow from all
        </Directory>
     
    </IfModule>
     
    #
    # Directives controlling the display of server-generated directory listings.
    #
    <IfModule mod_autoindex.c>
     
        #
        # IndexOptions: Controls the appearance of server-generated directory
        # listings.
        #
        IndexOptions FancyIndexing VersionSort HTMLTable NameWidth=*
     
        #
        # AddIcon* directives tell the server which icon to show for different
        # files or filename extensions.  These are only displayed for
        # FancyIndexed directories.
        #
        AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
     
        AddIconByType (TXT,/icons/text.gif) text/*
        AddIconByType (IMG,/icons/image2.gif) image/*
        AddIconByType (SND,/icons/sound2.gif) audio/*
        AddIconByType (VID,/icons/movie.gif) video/*
     
        AddIcon /icons/binary.gif .bin .exe
        AddIcon /icons/binhex.gif .hqx
        AddIcon /icons/tar.gif .tar
        AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
        AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
        AddIcon /icons/a.gif .ps .ai .eps
        AddIcon /icons/layout.gif .html .shtml .htm .pdf
        AddIcon /icons/text.gif .txt
        AddIcon /icons/c.gif .c
        AddIcon /icons/p.gif .pl .py
        AddIcon /icons/f.gif .for
        AddIcon /icons/dvi.gif .dvi
        AddIcon /icons/uuencoded.gif .uu
        AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
        AddIcon /icons/tex.gif .tex
        AddIcon /icons/bomb.gif core
     
        AddIcon /icons/back.gif ..
        AddIcon /icons/hand.right.gif README
        AddIcon /icons/folder.gif ^^DIRECTORY^^
        AddIcon /icons/blank.gif ^^BLANKICON^^
     
        #
        # DefaultIcon is which icon to show for files which do not have an icon
        # explicitly set.
        #
        DefaultIcon /icons/unknown.gif
     
        #
        # AddDescription allows you to place a short description after a file in
        # server-generated indexes.  These are only displayed for FancyIndexed
        # directories.
        # Format: AddDescription "description" filename
        #
        #AddDescription "GZIP compressed document" .gz
        #AddDescription "tar archive" .tar
        #AddDescription "GZIP compressed tar archive" .tgz
     
        #
        # ReadmeName is the name of the README file the server will look for by
        # default, and append to directory listings.
        #
        # HeaderName is the name of a file which should be prepended to
        # directory indexes.
        ReadmeName README.html
        HeaderName HEADER.html
     
        #
        # IndexIgnore is a set of filenames which directory indexing should ignore
        # and not include in the listing.  Shell-style wildcarding is permitted.
        #
        IndexIgnore .??* *~ *# RCS CVS *,v *,t
    </IfModule>
     
    <IfModule mod_mime.c>
     
        #
        # AddType allows you to add to or override the MIME configuration
        # file mime.types for specific file types.
        #
        #AddType application/x-gzip .tgz
        #
        # AddEncoding allows you to have certain browsers uncompress
        # information on the fly. Note: Not all browsers support this.
        # Despite the name similarity, the following Add* directives have
        # nothing to do with the FancyIndexing customization directives above.
        #
        #AddEncoding x-compress .Z
        #AddEncoding x-gzip .gz .tgz
        #
        # If the AddEncoding directives above are commented-out, then you
        # probably should define those extensions to indicate media types:
        #
        AddType application/x-compress .Z
        AddType application/x-gzip .gz .tgz
     
        #
        # DefaultLanguage and AddLanguage allows you to specify the language of
        # a document. You can then use content negotiation to give a browser a
        # file in a language the user can understand.
        #
        # Specify a default language. This means that all data
        # going out without a specific language tag (see below) will
        # be marked with this one. You probably do NOT want to set
        # this unless you are sure it is correct for all cases.
        #
        # * It is generally better to not mark a page as
        # * being a certain language than marking it with the wrong
        # * language!
        #
        # DefaultLanguage nl
        #
        # Note 1: The suffix does not have to be the same as the language
        # keyword --- those with documents in Polish (whose net-standard
        # language code is pl) may wish to use "AddLanguage pl .po" to
        # avoid the ambiguity with the common suffix for perl scripts.
        #
        # Note 2: The example entries below illustrate that in some cases
        # the two character 'Language' abbreviation is not identical to
        # the two character 'Country' code for its country,
        # E.g. 'Danmark/dk' versus 'Danish/da'.
        #
        # Note 3: In the case of 'ltz' we violate the RFC by using a three char
        # specifier. There is 'work in progress' to fix this and get
        # the reference data for rfc1766 cleaned up.
        #
        # Catalan (ca) - Croatian (hr) - Czech (cs) - Danish (da) - Dutch (nl)
        # English (en) - Esperanto (eo) - Estonian (et) - French (fr) - German (de)
        # Greek-Modern (el) - Hebrew (he) - Italian (it) - Japanese (ja)
        # Korean (ko) - Luxembourgeois* (ltz) - Norwegian Nynorsk (nn)
        # Norwegian (no) - Polish (pl) - Portugese (pt)
        # Brazilian Portuguese (pt-BR) - Russian (ru) - Swedish (sv)
        # Simplified Chinese (zh-CN) - Spanish (es) - Traditional Chinese (zh-TW)
        #
        AddLanguage ca .ca
        AddLanguage cs .cz .cs
        AddLanguage da .dk
        AddLanguage de .de
        AddLanguage el .el
        AddLanguage en .en
        AddLanguage eo .eo
        AddLanguage es .es
        AddLanguage et .et
        AddLanguage fr .fr
        AddLanguage he .he
        AddLanguage hr .hr
        AddLanguage it .it
        AddLanguage ja .ja
        AddLanguage ko .ko
        AddLanguage ltz .ltz
        AddLanguage nl .nl
        AddLanguage nn .nn
        AddLanguage no .no
        AddLanguage pl .po
        AddLanguage pt .pt
        AddLanguage pt-BR .pt-br
        AddLanguage ru .ru
        AddLanguage sv .sv
        AddLanguage zh-CN .zh-cn
        AddLanguage zh-TW .zh-tw
    </IfModule>
     
    <IfModule mod_negotiation.c>
        #
        # LanguagePriority allows you to give precedence to some languages
        # in case of a tie during content negotiation.
        #
        # Just list the languages in decreasing order of preference. We have
        # more or less alphabetized them here. You probably want to change this.
        #
        LanguagePriority en ca cs da de el eo es et fr he hr it ja ko ltz nl nn no pl pt pt-BR ru sv zh-CN zh-TW
     
        #
        # ForceLanguagePriority allows you to serve a result page rather than
        # MULTIPLE CHOICES (Prefer) [in case of a tie] or NOT ACCEPTABLE (Fallback)
        # [in case no accepted languages matched the available variants]
        #
        ForceLanguagePriority Prefer Fallback
     
    </IfModule>
     
    <IfModule mod_mime.c>
        #
        # Specify a default charset for all pages sent out. This is
        # always a good idea and opens the door for future internationalisation
        # of your web site, should you ever want it. Specifying it as
        # a default does little harm; as the standard dictates that a page
        # is in iso-8859-1 (latin1) unless specified otherwise i.e. you
        # are merely stating the obvious. There are also some security
        # reasons in browsers, related to javascript and URL parsing
        # which encourage you to always set a default char set.
        #
        #AddDefaultCharset ISO-8859-1
     
        #
        # Commonly used filename extensions to character sets. You probably
        # want to avoid clashes with the language extensions, unless you
        # are good at carefully testing your setup after each change.
        # See <a href="http://www.iana.org/assignments/character-sets" target="_blank">http://www.iana.org/assignments/character-sets</a> for the
        # official list of charset names and their respective RFCs.
        #
        AddCharset us-ascii    .ascii .us-ascii
        AddCharset ISO-8859-1  .iso8859-1  .latin1
        AddCharset ISO-8859-2  .iso8859-2  .latin2 .cen
        AddCharset ISO-8859-3  .iso8859-3  .latin3
        AddCharset ISO-8859-4  .iso8859-4  .latin4
        AddCharset ISO-8859-5  .iso8859-5  .cyr .iso-ru
        AddCharset ISO-8859-6  .iso8859-6  .arb .arabic
        AddCharset ISO-8859-7  .iso8859-7  .grk .greek
        AddCharset ISO-8859-8  .iso8859-8  .heb .hebrew
        AddCharset ISO-8859-9  .iso8859-9  .latin5 .trk
        AddCharset ISO-8859-10  .iso8859-10  .latin6
        AddCharset ISO-8859-13  .iso8859-13
        AddCharset ISO-8859-14  .iso8859-14  .latin8
        AddCharset ISO-8859-15  .iso8859-15  .latin9
        AddCharset ISO-8859-16  .iso8859-16  .latin10
        AddCharset ISO-2022-JP .iso2022-jp .jis
        AddCharset ISO-2022-KR .iso2022-kr .kis
        AddCharset ISO-2022-CN .iso2022-cn .cis
        AddCharset Big5        .Big5       .big5 .b5
        AddCharset cn-Big5     .cn-big5
        # For russian, more than one charset is used (depends on client, mostly):
        AddCharset WINDOWS-1251 .cp-1251   .win-1251
        AddCharset CP866       .cp866
        AddCharset KOI8      .koi8
        AddCharset KOI8-E      .koi8-e
        AddCharset KOI8-r      .koi8-r .koi8-ru
        AddCharset KOI8-U      .koi8-u
        AddCharset KOI8-ru     .koi8-uk .ua
        AddCharset ISO-10646-UCS-2 .ucs2
        AddCharset ISO-10646-UCS-4 .ucs4
        AddCharset UTF-7       .utf7
        AddCharset UTF-8       .utf8
        AddCharset UTF-16      .utf16
        AddCharset UTF-16BE    .utf16be
        AddCharset UTF-16LE    .utf16le
        AddCharset UTF-32      .utf32
        AddCharset UTF-32BE    .utf32be
        AddCharset UTF-32LE    .utf32le
        AddCharset euc-cn      .euc-cn
        AddCharset euc-gb      .euc-gb
        AddCharset euc-jp      .euc-jp
        AddCharset euc-kr      .euc-kr
        #Not sure how euc-tw got in - IANA doesn't list it???
        AddCharset EUC-TW      .euc-tw
        AddCharset gb2312      .gb2312 .gb
        AddCharset iso-10646-ucs-2 .ucs-2 .iso-10646-ucs-2
        AddCharset iso-10646-ucs-4 .ucs-4 .iso-10646-ucs-4
        AddCharset shift_jis   .shift_jis .sjis
     
        #
        # AddHandler allows you to map certain file extensions to "handlers":
        # actions unrelated to filetype. These can be either built into the server
        # or added with the Action directive (see below)
        #
        # To use CGI scripts outside of ScriptAliased directories:
        # (You will also need to add "ExecCGI" to the "Options" directive.)
        #
        #AddHandler cgi-script .cgi
        # AddHandler php-cgi .php
        #
        # For files that include their own HTTP headers:
        #
        #AddHandler send-as-is asis
     
        #
        # For server-parsed imagemap files:
        #
        #AddHandler imap-file map
     
        #
        # For type maps (negotiated resources):
        # (This is enabled by default to allow the Apache "It Worked" page
        #  to be distributed in multiple languages.)
        #
        AddHandler type-map var
     
        #
        # Filters allow you to process content before it is sent to the client.
        #
        # To parse .shtml files for server-side includes (SSI):
        # (You will also need to add "Includes" to the "Options" directive.)
        #
        AddType text/html .shtml
        AddOutputFilter INCLUDES .shtml
    </IfModule>
     
    #
    # Action lets you define media types that will execute a script whenever
    # a matching file is called. This eliminates the need for repeated URL
    # pathnames for oft-used CGI file processors.
    # Format: Action media/type /cgi-script/location
    # Format: Action handler-name /cgi-script/location
    #
     
    #
    # Customizable error responses come in three flavors:
    # 1) plain text 2) local redirects 3) external redirects
    #
    # Some examples:
    #ErrorDocument 500 "The server made a boo boo."
    #ErrorDocument 404 /missing.html
    #ErrorDocument 404 "/cgi-bin/missing_handler.pl"
    #ErrorDocument 402 <a href="http://www.example.com/subscription_info.html" target="_blank">http://www.example.com/subscription_info.html</a>
    #
     
    #
    # Putting this all together, we can internationalize error responses.
    #
    # We use Alias to redirect any /error/HTTP_<error>.html.var response to
    # our collection of by-error message multi-language collections.  We use
    # includes to substitute the appropriate text.
    #
    # You can modify the messages' appearance without changing any of the
    # default HTTP_<error>.html.var files by adding the line:
    #
    #   Alias /error/include/ "/your/include/path/"
    #
    # which allows you to create your own set of files by starting with the
    # /usr/share/apache2/error/include/ files and copying them to /your/include/path/,
    # even on a per-VirtualHost basis.  The default include files will display
    # your Apache version number and your ServerAdmin email address regardless
    # of the setting of ServerSignature.
    #
    # The internationalized error documents require mod_alias, mod_include
    # and mod_negotiation.  To activate them, uncomment the following 30 lines.
     
    #    Alias /error/ "/usr/share/apache2/error/"
    #
    #    <Directory "/usr/share/apache2/error">
    #        AllowOverride None
    #        Options IncludesNoExec
    #        AddOutputFilter Includes html
    #        AddHandler type-map var
    #        Order allow,deny
    #        Allow from all
    #        LanguagePriority en cs de es fr it nl sv pt-br ro
    #        ForceLanguagePriority Prefer Fallback
    #    </Directory>
    #
    #    ErrorDocument 400 /error/HTTP_BAD_REQUEST.html.var
    #    ErrorDocument 401 /error/HTTP_UNAUTHORIZED.html.var
    #    ErrorDocument 403 /error/HTTP_FORBIDDEN.html.var
    #    ErrorDocument 404 /error/HTTP_NOT_FOUND.html.var
    #    ErrorDocument 405 /error/HTTP_METHOD_NOT_ALLOWED.html.var
    #    ErrorDocument 408 /error/HTTP_REQUEST_TIME_OUT.html.var
    #    ErrorDocument 410 /error/HTTP_GONE.html.var
    #    ErrorDocument 411 /error/HTTP_LENGTH_REQUIRED.html.var
    #    ErrorDocument 412 /error/HTTP_PRECONDITION_FAILED.html.var
    #    ErrorDocument 413 /error/HTTP_REQUEST_ENTITY_TOO_LARGE.html.var
    #    ErrorDocument 414 /error/HTTP_REQUEST_URI_TOO_LARGE.html.var
    #    ErrorDocument 415 /error/HTTP_UNSUPPORTED_MEDIA_TYPE.html.var
    #    ErrorDocument 500 /error/HTTP_INTERNAL_SERVER_ERROR.html.var
    #    ErrorDocument 501 /error/HTTP_NOT_IMPLEMENTED.html.var
    #    ErrorDocument 502 /error/HTTP_BAD_GATEWAY.html.var
    #    ErrorDocument 503 /error/HTTP_SERVICE_UNAVAILABLE.html.var
    #    ErrorDocument 506 /error/HTTP_VARIANT_ALSO_VARIES.html.var
     
    <IfModule mod_setenvif.c>
        #
        # The following directives modify normal HTTP response behavior to
        # handle known problems with browser implementations.
        #
        BrowserMatch "Mozilla/2" nokeepalive
        BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
        BrowserMatch "RealPlayer 4\.0" force-response-1.0
        BrowserMatch "Java/1\.0" force-response-1.0
        BrowserMatch "JDK/1\.0" force-response-1.0
     
        #
        # The following directive disables redirects on non-GET requests for
        # a directory that does not include the trailing slash.  This fixes a
        # problem with Microsoft WebFolders which does not appropriately handle
        # redirects for folders with DAV methods.
        # Same deal with Apple's DAV filesystem and Gnome VFS support for DAV.
        #
        BrowserMatch "Microsoft Data Access Internet Publishing Provider" redirect-carefully
        BrowserMatch "MS FrontPage" redirect-carefully
        BrowserMatch "^WebDrive" redirect-carefully
        BrowserMatch "^WebDAVFS/1.[012]" redirect-carefully
        BrowserMatch "^gnome-vfs/1.0" redirect-carefully
        BrowserMatch "^XML Spy" redirect-carefully
        BrowserMatch "^Dreamweaver-WebDAV-SCM1" redirect-carefully
    </IfModule>
     
    #<IfModule mod_status.c>
        #
        # Allow server status reports generated by mod_status,
        # with the URL of <a href="http://servername/server-status" target="_blank">http://servername/server-status</a>
        # Change the ".example.com" to match your domain to enable.
        #
        #<Location /server-status>
        #    SetHandler server-status
        #    Order deny,allow
        #    Deny from all
        #    Allow from .example.com
        #</Location>
    #</IfModule>
     
    #<IfModule mod_info.c>
        #
        # Allow remote server configuration reports, with the URL of
        #  <a href="http://servername/server-info" target="_blank">http://servername/server-info</a> (requires that mod_info.c be loaded).
        # Change the ".example.com" to match your domain to enable.
        #
        #<Location /server-info>
        #    SetHandler server-info
        #    Order deny,allow
        #    Deny from all
        #    Allow from .example.com
        #</Location>
    #</IfModule>
     
    # Include the virtual host configurations:
    Include /etc/apache2/sites-enabled/

  2. #2
    Rédacteur
    Avatar de _Mac_
    Profil pro
    Inscrit en
    Août 2005
    Messages
    9 601
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Août 2005
    Messages : 9 601
    Points : 12 977
    Points
    12 977
    Par défaut
    Bonjour,

    Plusieurs solutions possibles. Entre autres activer la négociation de contenu ou tout simplement faire une réécriture d'URL de ce genre :
    Code : Sélectionner tout - Visualiser dans une fenêtre à part
    1
    2
    3
    RewriteEngine on
    RewriteCond %{REQUEST_FILENAME}.php -f
    RewriteRule ^(.*)$ $1.php [L,QSA]
    Je ne suis pas un vrai expert en la matière, donc je ne sais pas vraiment dire quelle option est la mieux.

    Du détail, du détail, du détail !!!
    Revenons à la source : lisons la documentation et les fichiers de trace, la réponse à notre problème s'y trouve sans doute

  3. #3
    Membre à l'essai
    Profil pro
    Inscrit en
    Juillet 2006
    Messages
    27
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Juillet 2006
    Messages : 27
    Points : 19
    Points
    19
    Par défaut
    Non cela ne fonctionne pas, j'ai toujours le même problème, et puis même je pense que cette solution est plutôt destinée à masquer le problème qui doit venir de la configuration du serveur. Mais je ne trouve pas la solution à mon problème sur Internet...

  4. #4
    Rédacteur
    Avatar de _Mac_
    Profil pro
    Inscrit en
    Août 2005
    Messages
    9 601
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Août 2005
    Messages : 9 601
    Points : 12 977
    Points
    12 977
    Par défaut
    Tu as cherché sur Google ? Genre avec les mots-clés "php without extension" ?

    Du détail, du détail, du détail !!!
    Revenons à la source : lisons la documentation et les fichiers de trace, la réponse à notre problème s'y trouve sans doute

  5. #5
    Membre à l'essai
    Profil pro
    Inscrit en
    Juillet 2006
    Messages
    27
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Juillet 2006
    Messages : 27
    Points : 19
    Points
    19
    Par défaut
    Salut !

    Oui j'ai cherché et j'ai testé ça :

    <FilesMatch "^([^\.]+)$">
    ForceType application/x-httpd-php
    </FilesMatch>
    et ça :

    DefaultType application-x-php
    et ça aussi :

    DefaultType application/x-httpd-php
    J'ai comparé tous les fichiers (apache2.conf, php.ini, httpd.conf) avec un serveur qui n'a pas ce problème, les fichiers sont identifiques ! La seule différence notable qu'il y ait entre les deux serveurs c'est le fait que PHP soit installé en CGI plutôt qu'en module (afin de pouvoir utiliser le module su-php). Donc je pense que le problème doit venir de l'exécution CGI de PHP.

    Et j'ai toujours ce problème.

    C'est quand même énorme : on accède à http://monsite.com/test, le serveur propose de télécharger le fichier "test.php", et bien qu'il y ait une extension .php, il ne l'exécute pas !

    D'autres idées ?

  6. #6
    Membre à l'essai
    Profil pro
    Inscrit en
    Juillet 2006
    Messages
    27
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Juillet 2006
    Messages : 27
    Points : 19
    Points
    19
    Par défaut
    Pour le moment, la protection que j'utilise c'est de mettre le même nom de fichier avec .bak à la fin, et Apache donnera ce fichier plutôt que le fichier .php.

    Exemple :
    http://monsite.com/test

    Il existe sur le serveur test.php et test.php.bak (avec rien dedans).

    Apache renvoie test.php.bak.

    Cela n'est en aucun cas une solution, mais protège au moins mes informations en attendant de trouver une véritable solution.

  7. #7
    Expert éminent sénior

    Profil pro
    Inscrit en
    Juin 2002
    Messages
    6 152
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Juin 2002
    Messages : 6 152
    Points : 17 778
    Points
    17 778
    Par défaut
    C'est justement parce que la négociation de contenu est (déjà) activée que ce problème se présente, non ? Si oui, avez-vous tenté de la désactiver (Options (-)MultiViews) ?

  8. #8
    Membre à l'essai
    Profil pro
    Inscrit en
    Juillet 2006
    Messages
    27
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Juillet 2006
    Messages : 27
    Points : 19
    Points
    19
    Par défaut
    Il semblerait que de supprimer le MultiViews ai résolu le problème (la solution me convient). Merci beaucoup :-)

    Cependant, je pense que cette solution est plus un "patch" qu'une correction. Sur les autres serveurs, ce problème ne se produit pas et il n'y a pas besoin de définir de règle (dans les .htaccess) pour que lorsque j'essaie d'accéder à http://monsite.com/test, il me redirige automatiquement sur test.php qu'il interprète correctement.

    Là le problème est résolu car, Apache n'essaie pas de me rediriger vers test.php, et donc m'affiche que le fichier est introuvable. Cependant, si un des sites hébergé réactive l'option MultiViews, il aura de nouveau ce problème.

  9. #9
    Expert éminent sénior

    Profil pro
    Inscrit en
    Juin 2002
    Messages
    6 152
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Juin 2002
    Messages : 6 152
    Points : 17 778
    Points
    17 778
    Par défaut
    C'est vrai. Pourriez-vous donner tout ce qui est lié à la configuration de (su)PHP ainsi que les différentes versions utilisées ?

  10. #10
    Membre à l'essai
    Profil pro
    Inscrit en
    Juillet 2006
    Messages
    27
    Détails du profil
    Informations personnelles :
    Localisation : France

    Informations forums :
    Inscription : Juillet 2006
    Messages : 27
    Points : 19
    Points
    19
    Par défaut
    La version utilisée de suPHP est la version 0.6.3 (la dernière en date).

    /etc/suphp/suphp.conf :
    Code : Sélectionner tout - Visualiser dans une fenêtre à part
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    [global]
    ;Path to logfile
    logfile=/var/log/suphp.log
     
    ;Loglevel
    loglevel=info
     
    ;User Apache is running as
    webserver_user=www-data
     
    ;Path all scripts have to be in
    docroot=/
     
    ;Path to chroot() to before executing script
    ;chroot=/mychroot
     
    ; Security options
    allow_file_group_writeable=false
    allow_file_others_writeable=false
    allow_directory_group_writeable=false
    allow_directory_others_writeable=false
     
    ;Check wheter script is within DOCUMENT_ROOT
    check_vhost_docroot=true
     
    ;Send minor error messages to browser
    errors_to_browser=true
     
    ;PATH environment variable
    env_path=/bin:/usr/bin:/usr/sbin:/sbin
     
    ;Umask to set, specify in octal notation
    umask=026
     
    ; Minimum UID
    min_uid=1000
     
    ; Minimum GID
    min_gid=1000
     
     
    [handlers]
    ;Handler for php-scripts
    x-httpd-php=php:/usr/bin/php5-cgi
     
    ;Handler for CGI-scripts
    x-suphp-cgi=execute:!self
    /etc/apache2/mods-enabled/suphp.conf
    Code : Sélectionner tout - Visualiser dans une fenêtre à part
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    <IfModule mod_suphp.c>
      AddType application/x-httpd-php .php .phtml .php3 .php4 .php5
      AddType application/x-httpd-php-source .phps
      AddHandler x-httpd-php .php .php3 .php4 .php5
      <Location />
         SuPHP_AddHandler x-httpd-php
      </Location>
     
      suPHP_ConfigPath /etc/php5/cgi
      suPHP_Engine on
    </IfModule>
    Je ne crois pas qu'il y ait d'autres fichiers en rapport avec la configuration de suPHP.

Discussions similaires

  1. Réponses: 1
    Dernier message: 04/04/2013, 00h26
  2. Réponses: 2
    Dernier message: 05/09/2012, 09h40
  3. Liste des fichiers sans l'extension .inc.php
    Par Bouki dans le forum Scripts/Batch
    Réponses: 0
    Dernier message: 25/07/2011, 18h43
  4. ajouter une extension à des fichiers sans extension
    Par biloux911 dans le forum VB.NET
    Réponses: 2
    Dernier message: 16/12/2010, 11h38
  5. Ouverture des fichier sans préciser l'extension
    Par Seb33300 dans le forum Apache
    Réponses: 1
    Dernier message: 05/05/2008, 09h47

Partager

Partager
  • Envoyer la discussion sur Viadeo
  • Envoyer la discussion sur Twitter
  • Envoyer la discussion sur Google
  • Envoyer la discussion sur Facebook
  • Envoyer la discussion sur Digg
  • Envoyer la discussion sur Delicious
  • Envoyer la discussion sur MySpace
  • Envoyer la discussion sur Yahoo