Re: .htaccess, CVE-2000-0234 and Zend

For me the url for the emulator is
http://192.168.2.44:10080/Zend5250Login/ Without the directive I can
get to http://192.168.2.44:10080/Zend5250Login/.htaccess With them, I
can't. I'm on an elder version of zend however.

Look for lines like this in your http.conf to see what possible
locations you have.
Alias /Zend5250Demos /usr/local/zendsvr6/5250/demos
Alias /Zend5250Login /usr/local/zendsvr6/5250/Generator/Form
Alias /Zend5250Appl /usr/local/zendsvr6/5250/Welcome

Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----

From: WEB400 [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Rob
Berendt
Sent: Thursday, August 23, 2018 8:32 AM
To: Web Enabling the IBM i(AS/400 and iSeries)
Subject: Re: [WEB400] .htaccess, CVE-2000-0234 and Zend

Before I make any changes I have to figure out if they are effective.

To do

that I would like to be able to hit the site and see if I can access

that file

before the changes. So, if my httpd.conf file has these lines ...
Listen *:10080
...
DocumentRoot /www/zendphp7/htdocs
...
and I see a login.html file in /www/zendphp7/htdocs and I can test it

by going

to http://myibmi:10080/login.html and I look in that same
/www/zendphp7/htdocs directory and notice
Zend5250Dispatcher SYMLNK->DIR
Zend5250Emulator SYMLNK->DIR
12=Work with links

Object link . . . . . : /www/zendphp7/htdocs/Zend5250Dispatcher
Content of Link . . . : /usr/local/zendphp7/5250/Emulator/html

Object link . . . . . : /www/zendphp7/htdocs/Zend5250Emulator
Content of Link . . . : /usr/local/zendphp7/5250/Emulator/html

and this is one of the places where an .htaccess file exists, how do I

test

access to it?
http://myibmi:10080/Zend5250Emulator/.htaccess
gives me: Internal Server Error

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600

Mail

to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)

mailing list

To post a message email: WEB400@xxxxxxxxxxxx To subscribe,

unsubscribe,

or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/web400.