FTP/HTTP server

26-May-98

Version 0.3.5

fhttpd 0.3.5 is released with major updates. Release 0.3.5 makes 0.3.4 patches obsolete.

Users' directories support. For a long time fhttpd had no support for automatic mapping of user directories. Now it's possible to enable ~username translation to some directory under user's home directory (default is public_html). Also fhttpd can be configured to use user's userid to access those files, run CGIs and modules. Userid 0 is the exception from this rule, module can run as it only if explicitly configured for that, and automatic mapping does not work on usernames with userid 0.
Modules can be configured to receive usernames/passwords for authentication. Default configuration is to never pass passwords to modules and scripts.
SCRIPT_NAME_ORIGINAL entry is added to modules interface -- it contains the SCRIPT_NAME value from the requested URL even if it was rewritten.
Scripts, running from FTP can have original filename in parameters.
GetRule allows case-insensitive matching for values, and field names matching is changed to case-insensitive.
In FTP directory creation mode can be specified for wildcard-mask, just like file creation mask.
File creation mask (umask) can be specified.
Ports can be bound to specific addresses, so it's possible to bind remote modules processes support to particular address (or localhost if remote processes should not be used) ot to coexist with other servers on the same host with multiple IP addresses.
Content-Type now can contain spaces.

OutExec didn't work on systems where mmap() is supported.
On files with zero length some browsers don't stop reading when in Keep-Alive mode. fhttpd now drops the connection on such files.
FTP timeout was counted even when transfer was in progress, just with longer value. Now timeout for control connection is disabled while transfer is in progress, and sender process reporting is used for data connection timeout.
FreeBSD and Solaris versions didn't handle Last-Modified/If-Modified-Since field properly -- that caused cached files to be "stuck" in a browser even if file on the server was changed. (from existing patch)
Errors handling in fhttpd-file module fixed (from existing patch)
Configuration file lines are now checked for length (previously were assumed to be always reasonably short because they can be made by sysadmin and therefore can't be a source of anything malicious).
Error messages for configuration file problems are now more clear.

fhttpd