Index: openacs-4/packages/acs-kernel/acs-kernel.info
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-kernel/acs-kernel.info,v
diff -u -r1.38 -r1.39
--- openacs-4/packages/acs-kernel/acs-kernel.info 24 Sep 2003 17:25:46 -0000 1.38
+++ openacs-4/packages/acs-kernel/acs-kernel.info 25 Sep 2003 13:39:02 -0000 1.39
@@ -7,13 +7,13 @@
t
t
-
+
Don Baccus
Routines and data models providing the foundation for OpenACS-based Web services.
- 2003-02-18
+ 2003-09-25
OpenACS
-
+
@@ -24,6 +24,7 @@
+
@@ -32,6 +33,7 @@
+
@@ -46,6 +48,7 @@
+
@@ -54,6 +57,8 @@
+
+
@@ -62,13 +67,8 @@
-
-
-
-
-
-
-
+
+
Index: openacs-4/packages/acs-tcl/tcl/request-processor-init.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-tcl/tcl/request-processor-init.tcl,v
diff -u -r1.6 -r1.7
--- openacs-4/packages/acs-tcl/tcl/request-processor-init.tcl 28 Aug 2003 09:41:43 -0000 1.6
+++ openacs-4/packages/acs-tcl/tcl/request-processor-init.tcl 25 Sep 2003 13:39:02 -0000 1.7
@@ -151,3 +151,8 @@
[list $method $path rp_invoke_proc [list $proc_index $debug_p $arg_count $proc $arg]]
}
}
+
+# Deny access to .xql URLs
+if { ![parameter::get -parameter ServeXQLFiles -package_id [ad_acs_kernel_id] -default 0] } {
+ ad_register_filter postauth GET *.xql request_denied_filter
+}
Index: openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl,v
diff -u -r1.45 -r1.46
--- openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl 24 Sep 2003 22:52:16 -0000 1.45
+++ openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl 25 Sep 2003 13:39:02 -0000 1.46
@@ -1386,3 +1386,17 @@
ad_proc -private rp_lookup_node_from_host { host } {
return [db_string node_id { *SQL* } -default ""]
}
+
+
+
+ad_proc -public request_denied_filter { why } {
+ Deny serving the request
+} {
+ ad_return_forbidden \
+ "Forbidden URL" \
+ "No, we're not going to show you this file
"
+
+ ns_return 200 text/html $output
+
+ return filter_return
+}