feeds - althttpd timeline.rss

home | feeds |donate

althttpd timeline.rss

Changelog of the althttpd CGI server application (made by the creator of SQLite)

further tweaks to the documentation. (tags: trunk)

documentation updates associated with the use of a sha-256 hash of the authorization credentials. (tags: trunk)

*merge* allow downloads greater than 2gb (tags: trunk)

for basic authorization, one can now but the sha-256 hash of the login:password on the "user" line of the "-auth" file, so that the login:password does not need to appear on disk as cleartext. (tags: trunk)

post: .scgi spec file implicit search request

edit reply: how to debug

edit reply: how to debug

reply: how to debug

reply: how to debug

post: how to debug

edit reply: url redirection into directories unnecessarily includes the entire path [patch]

reply: url redirection into directories unnecessarily includes the entire path [patch]

reply: url redirection into directories unnecessarily includes the entire path [patch]

reply: url redirection into directories unnecessarily includes the entire path [patch]

reply: url redirection into directories unnecessarily includes the entire path [patch]

reply: url redirection into directories unnecessarily includes the entire path [patch]

reply: issue with large file downloads

reply: issue with large file downloads

changes based on [/forumpost/8ebb2dc51f] enabling althttpd to serve and log content larger than 2gb. remove some dead code which otherwise would have needed to be patched. this is in a branch for testing on my server. (tags: gt-2gb)

edit reply: url redirection into directories unnecessarily includes the entire path [patch]

reply: url redirection into directories unnecessarily includes the entire path [patch]

reply: url redirection into directories unnecessarily includes the entire path [patch]

reply: file conversion

reply: file conversion

post: file conversion

reply: url redirection into directories unnecessarily includes the entire path [patch]

edit: url redirection into directories unnecessarily includes the entire path [patch]

edit: url redirection into directories unnecessarily includes the entire path [patch]

post: url redirection into directories unnecessarily includes the entire path [patch]

edit reply: php how to?

reply: php how to?

reply: alpine package builders unable to download source

edit reply: alpine package builders unable to download source

reply: alpine package builders unable to download source

reply: alpine package builders unable to download source

reply: alpine package builders unable to download source

reply: alpine package builders unable to download source

post: alpine package builders unable to download source

edit reply: deny all ip and allow some ip adresses

edit reply: deny all ip and allow some ip adresses

reply: deny all ip and allow some ip adresses

reply: deny all ip and allow some ip adresses

reply: deny all ip and allow some ip adresses

reply: deny all ip and allow some ip adresses

reply: deny all ip and allow some ip adresses

reply: deny all ip and allow some ip adresses

reply: deny all ip and allow some ip adresses

post: deny all ip and allow some ip adresses

minor improvements to logview (tags: trunk)

fix "all entries" hyperlinks on /byuri in logview when sorting by column (tags: trunk)

enhance the /byuri pages of logview to provide sort by column (tags: trunk)

fix a minor problem in logview. (tags: trunk)

add the logrotate.tcl script. enhance logtodb so that it no longer tries to compute the log.robot column, as that column has become useless. (tags: trunk)

improvements and bug fixes to logview (tags: trunk)

reply: i can’t use althttpd on openbsd

consolidate the logview and logview5 scripts into a single script that varies its behavior (slightly) according to its filename. (tags: trunk)

improved per-ip results in logview and logview5. (tags: trunk)

logview bug fixes and removal of dead code and removal of all attempts at tracking robot traffic, which is no longer reliable. (tags: trunk)

fix column name errors in logview and logview5. (tags: trunk)

reply: has the source code policy for althttpd changed

reply: has the source code policy for althttpd changed

reply: has the source code policy for althttpd changed

reply: has the source code policy for althttpd changed

further improvements to logview and logview5. (tags: trunk)

reply: has the source code policy for althttpd changed

edit: has the source code policy for althttpd changed

post: has the source code policy for althttpd changed

improvements to logview for better analysis of attacks. (tags: trunk)

add the "traffic by cgi" tables to the logview cgis. (tags: trunk)

edit: tcl source call fails in subfolder

reply: disapprove: tcl source call fails in subfolder

post: disapprove: tcl source call fails in subfolder

post: tcl source call fails in subfolder

post: i can’t use althttpd on openbsd

reply: empty reply from althttpd behind relayd

edit reply: issue with large file downloads

reply: issue with large file downloads

edit reply: empty reply from althttpd behind relayd

reply: empty reply from althttpd behind relayd

reply: empty reply from althttpd behind relayd

edit reply: empty reply from althttpd behind relayd

reply: empty reply from althttpd behind relayd

reply: issue with large file downloads

reply: empty reply from althttpd behind relayd

reply: empty reply from althttpd behind relayd

reply: empty reply from althttpd behind relayd

reply: empty reply from althttpd behind relayd

post: empty reply from althttpd behind relayd

reply: issue with large file downloads

reply: issue with large file downloads

reply: issue with large file downloads

when responding with file content, do not use sendfile() if the size is >=0x7ffff000, as sendfile() will silently stop sending after that many bytes. idea taken from [/forumpost/9701efc9fe745511]. (tags: trunk)

omit the "human traffic by domain" analysis in the "logview" script. (tags: trunk)

fix a memory leak and possible null-pointer dereference in logtodb.c. (tags: trunk)

add abusive ai robots to the disallow list. (tags: trunk)

reply: issue with large file downloads

reply: qr code file copy with althttpd and qrencode

reply: qr code file copy with althttpd and qrencode

reply: qr code file copy with althttpd and qrencode

reply: qr code file copy with althttpd and qrencode

reply: qr code file copy with althttpd and qrencode

edit: qr code file copy with althttpd and qrencode

reply: qr code copy with althttpd and qrencode

edit: qr code copy with althttpd and qrencode

post: qr code copy with althttpd and qrencode

reply: issue with large file downloads

reply: issue with large file downloads

edit reply: issue with large file downloads

reply: issue with large file downloads

edit reply: issue with large file downloads

reply: issue with large file downloads

reply: issue with large file downloads

edit reply: issue with large file downloads

edit reply: issue with large file downloads

edit reply: issue with large file downloads

edit reply: issue with large file downloads

edit reply: issue with large file downloads

reply: issue with large file downloads

post: issue with large file downloads

the scrapy robot is abusive - running dozens of requests per second and ignoring robots.txt. so block it. (tags: trunk)

reply: standalone mode in production?

reply: standalone mode in production?

reply: standalone mode in production?

edit reply: multiple website help

reply: multiple website help

reply: multiple website help

reply: multiple website help

edit: multiple website help

post: multiple website help

reply: blank responses from server. any thoughts/tips on how to debug or investigate?

reply: blank responses from server. any thoughts/tips on how to debug or investigate?

improved error reply if cgi fails to start. (tags: trunk)

improved --help message. no functional changes. (tags: trunk)

return an error if a cgi program fails to start. (tags: trunk)

edit reply: blank responses from server. any thoughts/tips on how to debug or investigate?

reply: blank responses from server. any thoughts/tips on how to debug or investigate?

reply: blank responses from server. any thoughts/tips on how to debug or investigate?

reply: blank responses from server. any thoughts/tips on how to debug or investigate?

post: blank responses from server. any thoughts/tips on how to debug or investigate?

add woff/woff2 mimetypes. (tags: trunk)

add mimetype flags which say to elide the charset from the response content-type to all mimetypes which are known to be binary. probably many of the unmodified mimetypes refer to binary formats, but only those known by me to be binary were modified. (tags: trunk)

reply: ubuntu althttpd.c:362:10: fatal error: version.h: no such file or directory

reply: ubuntu althttpd.c:362:10: fatal error: version.h: no such file or directory

reply: ubuntu althttpd.c:362:10: fatal error: version.h: no such file or directory

edit: ubuntu althttpd.c:362:10: fatal error: version.h: no such file or directory

edit: ubuntu althttpd.c:362:10: fatal error: version.h: no such file or directory

post: ubuntu althttpd.c:362:10: fatal error: version.h: no such file or directory

alternative logview script "logview5" gives a 5-minute snapshot. (tags: trunk)

another minor fix to logview. (tags: trunk)

minor bug fix in logview. (tags: trunk)

enhance the 16-th column of the logfile output such that it can be a text string of the form "n+suffix" meaning that the script_name is constructed from the first n bytes of the url followed by suffix. this is used in cases when an extension is added (ex: /not-found.html) where the extension is not contained within the original url. the logtodb program is also updated to handle this case. (tags: trunk)

fix harmless comments in documentation. (tags: trunk)

post: (typo) logtodb.c

post: (two typos) althttpd.c

another couple typos reported off-list by [/timeline?u=brickviking&y=a|brickviking]. (tags: trunk)

typo fixes reported off-list. (tags: trunk)

typo fix reported off-list (should have been in the previous checkin). (tags: trunk)

typo fix reported off-list. (tags: trunk)

typo fix reported in [/forumpost/02820c61b8]. (tags: trunk)

post: (typo) standalone_mode.md

reply: standalone mode in production?

tweaks to the documentation. (tags: trunk)

reply: sqlite.org and associated web domains

documentation updates to closer align with the latest changes. (tags: trunk)

fix a typo in the previous check-in that prevented --tls-port from working. (tags: trunk)

enhance standalone mode to support both ipv4 and ipv6. legacy option --family, which has always been a no-op as far as i can tell, has been removed. (tags: trunk)

reply: sqlite.org and associated web domains

edit reply: sqlite.org and associated web domains

reply: sqlite.org and associated web domains

edit reply: sqlite.org and associated web domains

reply: sqlite.org and associated web domains

reply: sqlite.org and associated web domains

edit reply: sqlite.org and associated web domains

reply: sqlite.org and associated web domains

reply: sqlite.org and associated web domains

edit reply: sqlite.org and associated web domains

reply: sqlite.org and associated web domains

reply: sqlite.org and associated web domains

make the maximum number of children a start-time option. (tags: trunk)

post: sqlite.org and associated web domains

the max_children limit is too low. make it 20x higher. we discovered this when we tried to run standalone on sqlite.org. althttpd has been running sqlite.org for 20 years, but it has previously always been fronted by xinetd or similar, so the undersized max_children limit never got in the way before. (tags: trunk)

add ldflags to the makefile to simplify the build on haiku, where ldflags must incldue -lnetwork. (tags: trunk)

reply: openrc service script documentation

reply: openrc service script documentation

edit reply: openrc service script documentation

reply: openrc service script documentation

reply: openrc service script documentation

if the command-line specifies --tls-port but not --port then it assumes that you want a tls-only server. (tags: trunk)

the --options argument prints out all of the command-line options that are documented in the help text, then exits. (tags: trunk)

add the --certdir command-line option which makes it easier to specify the cert in the case where the cert and private key are in the same directory and have the usual names ("fullchain.pem" and "privkey.pem"). (tags: trunk)

post: openrc service script documentation

improved error messages for "cannot run as root". (tags: trunk)

reply: new not-found.html support

reply: new not-found.html support

post: new not-found.html support

if a *.website directory contains only the file "not-found.html" then that file is returned, or it is run as cgi if it is executable. (tags: trunk)

if the search for the content deliver lands on the "not-found.html" file and that file is executable, then run it like any other cgi script rather than redirecting to that file. (tags: trunk)

do not wait more than five seconds for the second and subsequent http request header on a single connection, to avoid having an excess number of lingering childern in the process table. if there is no immediate work to do, die immediately. (tags: trunk)

in standalone mode, after the fork() the child process should close the listening sockets which will no longer be needed. this allows those sockets to be reopened if the parent dies but the child continues running. (tags: trunk)

edit reply: goaccess log visualiser

add docs for setting up althttpd as an openrc service. (tags: trunk)

reply: request: brotli compression

reply: request: brotli compression

*merge* when serving file x, if x.br exists and the client supports brotli compression, serve x.br instead of x, analog to the x.gz support. based on [/forumpost/f8e221872ac6b643]. (tags: trunk)

reply: goaccess log visualiser

the --user option is not required. if omitted, the user and group for the process is user and group that owns --root directory. the process still refuses to run if either user or group is root. (tags: trunk)

if the --tls-port option is used but the --cert file does not (yet) exist, then continue operating non-tls on --port and do not raise an error. in this way, the same althttpd command line can be invoked to start the server both before and after the cert has been obtained. (tags: trunk)

update notes on static building. (tags: trunk)

when operating stand-alone with tls available, the --tls-port option can be used to specify a port for tls connections while --port is used for non-tls connections. thus a single instance of althttpd can server both 80 and 443 at once. (tags: trunk)

add the --help command-line option. (tags: trunk)

update contrib/docker/build-static-althttpd.sh for makefile changes made since it was last edited. (tags: trunk)

slight doc correction in the compressed files support. (tags: brotli-compression)

edit reply: request: brotli compression

reply: request: brotli compression

update althttpd.md to mention handling of .br files alongside .gz files. (tags: brotli-compression)

reply: request: brotli compression

edit reply: request: brotli compression

reply: request: brotli compression

when serving file x, if x.br exists and the client supports brotli compression, serve x.br instead of x, analog to the x.gz support. based on [/forumpost/f8e221872ac6b643]. not thoroughly tested but seems to work. (tags: brotli-compression)

reply: request: brotli compression

reply: request: brotli compression

edit reply: request: brotli compression

reply: request: brotli compression

reply: request: brotli compression

reply: request: brotli compression

reply: request: brotli compression

post: request: brotli compression

reply: why not using %u instead of %d for printing nmalloc in function cgihandlereply?

reply: why not using %u instead of %d for printing nmalloc in function cgihandlereply?

reply: why not using %u instead of %d for printing nmalloc in function cgihandlereply?

for error messages, render size_t values as long long unsigned int. (tags: trunk)

reply: flushing the display data to the browser

post: why not using %u instead of %d for printing nmalloc in function cgihandlereply?

reply: flushing the display data to the browser

reply: flushing the display data to the browser

reply: flushing the display data to the browser

edit reply: flushing the display data to the browser

reply: flushing the display data to the browser

reply: flushing the display data to the browser

reply: flushing the display data to the browser

reply: flushing the display data to the browser

post: flushing the display data to the browser

fix typos in the main documentation page: althttpd.md. (tags: trunk)

reply: how to read uploaded files in althttpd cgi program?

reply: how to read uploaded files in althttpd cgi program?

edit reply: how to read uploaded files in althttpd cgi program?

reply: how to read uploaded files in althttpd cgi program?

reply: how to read uploaded files in althttpd cgi program?

reply: how to read uploaded files in althttpd cgi program?

reply: how to read uploaded files in althttpd cgi program?

reply: how to read uploaded files in althttpd cgi program?

reply: how to read uploaded files in althttpd cgi program?

post: how to read uploaded files in althttpd cgi program?

edit reply: how to have multiple https certificates for multiple domains with althttpd?

reply: how to have multiple https certificates for multiple domains with althttpd?

edit reply: how to have multiple https certificates for multiple domains with althttpd?

reply: how to have multiple https certificates for multiple domains with althttpd?

reply: how to have multiple https certificates for multiple domains with althttpd?

reply: how to have multiple https certificates for multiple domains with althttpd?

reply: how to have multiple https certificates for multiple domains with althttpd?

reply: how to have multiple https certificates for multiple domains with althttpd?

post: how to have multiple https certificates for multiple domains with althttpd?

reenable restrictions on using less-secure tls protocols. (tags: trunk)

reply: goaccess log visualiser

edit reply: goaccess log visualiser

edit: goaccess log visualiser

edit reply: goaccess log visualiser

reply: https strict transport security header

reply: https strict transport security header

edit: goaccess log visualiser

reply: goaccess log visualiser

reply: https strict transport security header

post: goaccess log visualiser

reply: https strict transport security header

reply: logfile name datetime interpolation

reply: https strict transport security header

reply: https strict transport security header

reply: logfile name datetime interpolation

reply: https strict transport security header

reply: logfile name datetime interpolation

post: https strict transport security header

reply: logfile name datetime interpolation

edit reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

move the calculation of the request start time up to resolve problem where log writes can be sent to the wrong file when running in standalone server mode, as discussed in [/forumpost/0e8dfd8d02bccd4a]. (tags: trunk)

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

edit reply: logfile name datetime interpolation

edit reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: the cgi program /index.html is writable by users other than its owner

reply: the cgi program /index.html is writable by users other than its owner

post: the cgi program /index.html is writable by users other than its owner

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

reply: logfile name datetime interpolation

improvements, including better instructions in the header comment, to the static-ssl.mk makefile. (tags: trunk)

post: logfile name datetime interpolation

reply: ssl options

reply: ssl options

reply: ssl options

reply: server_port cgi env value is dubious

reply: ssl options

reply: server_port cgi env value is dubious

do a better job of figuring out the correct server_port. [/forumpost/462a113f0a|forum post 462a113f0a]. (tags: trunk)

reply: ssl options

comment out the tls security enhancements, because we have received one report of it breaking the sqlite website. (tags: trunk)

post: server_port cgi env value is dubious

reply: ssl options

reply: ssl options

include the althttpd commit date/time in the server_software header field of the reply. (tags: trunk)

increase security of tls connections, as suggested by [/forumpost/b8139d20e60028ae|forum post b8139d20e60028ae]. (tags: trunk)

reply: ssl options

reply: ssl options

reply: ssl options

reply: ssl options

reply: ssl options

post: ssl options

reply: alot of spawned processes

reply: alot of spawned processes

edit reply: alot of spawned processes

edit reply: alot of spawned processes

edit reply: alot of spawned processes

reply: alot of spawned processes

post: alot of spawned processes

edit reply: failed to build althttpd on msys2

reply: failed to build althttpd on msys2

reply: failed to build althttpd on msys2

reply: failed to build althttpd on msys2

reply: failed to build althttpd on msys2

reply: failed to build althttpd on msys2

reply: failed to build althttpd on cygwin

reply: failed to build althttpd on msys2

edit reply: failed to build althttpd on msys2

remove unused syslog.h header after testing on linux and openbsd. the header's lack in msys2 builds was reported in [/forumpost/3e78394004]. (tags: trunk)

reply: failed to build althttpd on cygwin

change an unsigned int to a socklen_t to resolve portability problem reported in [](/info/83cc724873). (tags: trunk)

reply: failed to build althttpd on msys2

post: failed to build althttpd on cygwin

post: failed to build althttpd on msys2

forgot to add comment about the mtls change with regard to the cli parameter (tags: mutual-tls-option)

reply: password hashing for "-auth" files

reply: password hashing for "-auth" files

reply: disalbe 'chroot jail' in systemd running mode ?

reply: disalbe 'chroot jail' in systemd running mode ?

reply: disalbe 'chroot jail' in systemd running mode ?

reply: disalbe 'chroot jail' in systemd running mode ?

reply: disalbe 'chroot jail' in systemd running mode ?

post: disalbe 'chroot jail' in systemd running mode ?

post: password hashing for "-auth" files

remove the crlf-free note at the end of the documentation, since it no longer applies. (tags: trunk)

change send_cr to default-on. i'm so sad about this.... (tags: trunk)

reply: cgi and tcl script?

reply: cgi and tcl script?

edit: cgi and tcl script?

post: cgi and tcl script?

added an option to require mutual tls for extra security when using althttpsd (tags: mutual-tls-option)

add a note to the end of the main description of althttpd to indicate that it is carriage-return free software. provide the send_cr compile-time option to make it standards compliant, for the timid. (tags: trunk)

add a copyright release form. (tags: trunk)

send bare \n instead of \r\n for all http reply headers. (tags: trunk)

fix the --enable-sab command-line option so that it only consumes a single argument from the command-line, not two. (tags: trunk)

reply: request for mime ".xsl" / ".xslt" => "application/xml"

edit reply: request for mime ".xsl" / ".xslt" => "application/xml"

reply: request for mime ".xsl" / ".xslt" => "application/xml"

add xsl and xslt mimetype entries, per request in [7fdd2d45b9]. (tags: trunk)

post: request for mime ".xsl" / ".xslt" => "application/xml"

reply: document updated build instructions

update the build docs to reflect that more than a single c file is now required, as reported in [/forumpost/1dc9c519ce|forum post 1dc9c519ce]. (tags: trunk)

reply: document updated build instructions

reply: document updated build instructions

post: document updated build instructions

minor doc typo fix. (tags: trunk)

updates to the logview scripts. (tags: trunk)

show change log for a successful captcha completion in logview. (tags: trunk)

add a count of the number of successfully completed captchas to the logview. (tags: trunk)

fix typo in robot stats of logview. (tags: trunk)

new section in the logview report gives stats on robots. (tags: trunk)

ensure that the "children user time" in the log is at least 1 microsecond if any cgi program was invoked. this allows logfile analysis programs to correctly identify cgi requests by observing a non-zero "children user time". (tags: trunk)

enhancements to logview to show the percentage of robots. (tags: trunk)

if the x-robot: header is found coming back from a cgi, then set the linenumber field of the log file entry to either 1 (not-a-robot) or 2 (is-a-robot). (tags: trunk)

disable the chinese spider detection added by the previous two check-ins. update the logview utility to assume that all traffic from an ip address that ever lands on a honeypot is robotic. (tags: trunk)

enhancements to the chinese forum-timeline spider exclusion. (tags: trunk)

defend against the chinese spider attack against the sqlite forum timeline. (tags: trunk)

add sql ==> application/sql mime type mapping. (tags: trunk)

fix typo in the logview wapp script. (tags: trunk)

add image/jp2 mime type for parity with fossil and fix a mis-ordered entry for the jpe mime type. (tags: trunk)

post: simplication -- use c90 bsearch function

rebustness improvement to logtodb.c and logview. (tags: trunk)

reply: php how to?

reply: php how to?

edit reply: php how to?

reply: php how to?

*merge* merge updates from trunk. (tags: redirfile)

*merge* merge updates from trunk. (tags: subdir)

add missing -static flag to static-logtodb build target, as reported in the forum. (tags: trunk)

reply: problem with logview in althttpd chroot

reply: problem with logview in althttpd chroot

post: problem with logview in althttpd chroot

reply: http 404 enh request

reply: http 404 enh request

reply: http 404 enh request

add enclosing html tag around 404 docs, per forum request. (tags: trunk)

post: http 404 enh request

in logview, add a bandwidth column to the cpu hogs report. (tags: trunk)