From 76e9075d45e62a7cf5bd7c0b794063dc0fe9183b Mon Sep 17 00:00:00 2001
From: Andre Malo This module provides a filter which will process files
before they are sent to the client. The processing is
- controlled by specially formated SGML comments, referred to as
- elements. These elements allow conditional text, the
+ controlled by specially formatted SGML comments, referred to as
+ elements. These elements allow conditional text, the
inclusion of other files or programs, as well as the setting and
printing of environment variables. The following directive must be given for the directories
containing the shtml files (typically in a
- s, that was still present (sometimes) -
fixed some typos - markup.
content changes:
- added a note about the behaviour of fsize/flastmod virtual
- removed apache 1.2 compatibility notes (this is a 2.x documentation)
- added a compat note in the module overview table
- added description for QUERY_STRING_UNESCAPED
- splitted flow control descriptions (=, != vs. <, <=, >, >=; the former
allow regexps, the latter don't)
- added a sentence and an example about regexp capturing
- mentioned the literal comparison (vs. numerical)
- includesNOEXEC allows only text/* ressources to be included.
mentioned that.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97535 13f79535-47bb-0310-9956-ffa450edef68
---
docs/manual/mod/mod_include.xml | 988 ++++++++++++++++----------------
1 file changed, 481 insertions(+), 507 deletions(-)
diff --git a/docs/manual/mod/mod_include.xml b/docs/manual/mod/mod_include.xml
index 9c093bbf05..226cefee01 100644
--- a/docs/manual/mod/mod_include.xml
+++ b/docs/manual/mod/mod_include.xml
@@ -8,20 +8,23 @@
<Directory>
section, but this directive is
- also valid in .htaccess files if AllowOverride
- Options
is set):.htaccess
files if
+ Options
+ is set):
text/html
).
For more information, see our Tutorial on Server Side - Includes.
- + href="../howto/ssi.html">Tutorial on Server Side Includes. + + +Files processed for server-side includes no longer accept
+ requests with PATH_INFO
(trailing pathname information)
+ by default. You can use the PATH_INFO
.
The document is parsed as an HTML document, with special commands embedded as SGML comments. A command has the syntax:
<!--#
element attribute=value
- attribute=value ... -->
+ <!--#element attribute=value
+ attribute=value ... -->
The value will often be enclosed in double quotes; many
- commands only allow a single attribute-value pair. Note that
- the comment terminator (-->
) should be preceded
- by whitespace to ensure that it isn't considered part of an SSI
- token.
The allowed elements are:
- -This command controls various aspects of the parsing. The - valid attributes are:
- -bytes
- for a count in bytes, or abbrev
for a count
- in Kb or Mb as appropriate.strftime(3)
library routine when printing
- dates.This command prints one of the include
- variables, defined below. If the variable is unset, it
- is printed as (none)
. Any dates printed are
- subject to the currently configured timefmt
.
Attributes:
- -echo
element,
- the default is set to "entity", resulting in entity
- encoding (which is appropriate in the context of a
- block-level HTML element, eg. a paragraph of text). This
- can be changed by adding an encoding
- attribute, which will remain in effect until the next
- encoding
attribute is encountered or the
- element ends, whichever comes first. Note that the
- encoding
attribute must precede the
- corresponding var
attribute to be effective,
- and that only special characters as defined in the
- ISO-8859-1 character encoding will be encoded. This
- encoding process may not have the desired result if a
- different character encoding is in use. Apache 1.3.12 and
- above; previous versions do no encoding.The exec command executes a given shell command or CGI
- script. It requires
The value specifies a (%-encoded) URL-path to
- the CGI script. If the path does not begin with a slash (/),
- then it is taken to be relative to the current
- document. The document referenced by this path is
- invoked as a CGI script, even if the server would not
- normally recognize it as such. However, the directory
- containing the script must be enabled for CGI scripts
- (with
The CGI script is given the PATH_INFO and query - string (QUERY_STRING) of the original request from the - client; these cannot be specified in the URL path. The - include variables will be available to the script in - addition to the standard CGI - environment.
- -For example:
- -If the script returns a Location: header instead of - output, then this will be translated into an HTML - anchor.
- -The include
- virtual
element should be
- used in preference to exec cgi
. In particular,
- if you need to pass additional arguments to a CGI program,
- using the query string, this cannot be done with exec
- cgi
, but can be done with include
- virtual
, as shown here:
The server will execute the given string using
- /bin/sh
. The include variables are available
- to the command, in addition to the usual set of CGI
- variables.
The use of #include
- virtual
is almost always
- prefered to using either #exec cgi
or #exec
- cmd
. The former (#include virtual
) uses the
- standard Apache sub-request mechanism to include files or
- scripts. It is much better tested and maintained.
In addition, on some platforms, like Win32, and on unix
- when using suexec, you cannot pass arguments to a command in
- an exec
directive, or otherwise include spaces in
- the command. Thus, while the following will work under a
- non-suexec configuration on unix, it will not produce the
- desired result under Win32, or when running suexec:
The value will often be enclosed in double quotes, but single
+ quotes ('
) and backticks (`
) are also
+ possible. Many commands only allow a single attribute-value pair.
+ Note that the comment terminator (-->
) should be
+ preceded by whitespace to ensure that it isn't considered part of
+ an SSI token. The allowed elements are listed in the following
+ table:
Element | Description |
---|---|
config |
+ configure output formats |
echo |
+ print variables |
exec |
+ execute external programs |
fsize |
+ print size of a file |
flastmod |
+ print last modification time of a file |
include |
+ include a file |
printenv |
+ print all available variables |
set |
+ set a value of a variable |
SSI elements may be defined by modules other than
+ exec
element is provided by
+
This command controls various aspects of the parsing. The + valid attributes are:
+ +errmsg
sizefmt
bytes
+ for a count in bytes, or abbrev
for a count
+ in Kb or Mb as appropriate, for example a size of 1024 bytes
+ will be printed as "1K".timefmt
strftime(3)
library routine when printing
+ dates.This command prints one of the include
+ variables, defined below. If the variable is unset, the result is
+ determined by the timefmt
.
Attributes:
+ +var
encoding
Specifies how Apache should encode special characters
+ contained in the variable before outputting them. If set
+ to none
, no encoding will be done. If set to
+ url
, then URL encoding (also known as %-encoding;
+ this is appropriate for use within URLs in links, etc.) will be
+ performed. At the start of an echo
element,
+ the default is set to entity
, resulting in entity
+ encoding (which is appropriate in the context of a block-level
+ HTML element, e.g. a paragraph of text). This can be
+ changed by adding an encoding
attribute, which will
+ remain in effect until the next encoding
attribute
+ is encountered or the element ends, whichever comes first.
The encoding
attribute must precede the
+ corresponding var
attribute to be effective, and
+ only special characters as defined in the ISO-8859-1 character
+ encoding will be encoded. This encoding process may not have the
+ desired result if a different character encoding is in use.
The exec
command executes a given shell command or
+ CGI script. It requires IncludesNOEXEC
is set, this command is completely
+ disabled. The valid attributes are:
cgi
The value specifies a (%-encoded) URL-path to
+ the CGI script. If the path does not begin with a slash (/),
+ then it is taken to be relative to the current
+ document. The document referenced by this path is
+ invoked as a CGI script, even if the server would not
+ normally recognize it as such. However, the directory
+ containing the script must be enabled for CGI scripts
+ (with ExecCGI
).
The CGI script is given the PATH_INFO
and query
+ string (QUERY_STRING
) of the original request from the
+ client; these cannot be specified in the URL path. The
+ include variables will be available to the script in addition to
+ the standard CGI environment.
This command prints the size of the specified file, subject
- to the sizefmt
format specification.
- Attributes:
If the script returns a Location:
header instead of
+ output, then this will be translated into an HTML anchor.
The include virtual
+ element should be used in preference to exec cgi
. In
+ particular, if you need to pass additional arguments to a CGI program,
+ using the query string, this cannot be done with exec
+ cgi
, but can be done with include virtual
, as
+ shown here:
cmd
The server will execute the given string using
+ /bin/sh
. The include variables are available to the command, in addition
+ to the usual set of CGI variables.
The use of #include virtual
is almost always prefered to using
+ either #exec cgi
or #exec cmd
. The former
+ (#include virtual
) uses the standard Apache sub-request
+ mechanism to include files or scripts. It is much better tested and
+ maintained.
In addition, on some platforms, like Win32, and on unix when
+ using suexec, you cannot pass arguments
+ to a command in an exec
directive, or otherwise include
+ spaces in the command. Thus, while the following will work under a
+ non-suexec configuration on unix, it will not produce the desired
+ result under Win32, or when running suexec:
This command prints the size of the specified file, subject
+ to the sizefmt
format specification. Attributes:
file
virtual
This command prints the last modification date of the
specified file, subject to the timefmt
format
specification. The attributes are the same as for the
- fsize
command.
This command inserts the text of another document or file - into the parsed file. Any included file is subject to the - usual access control. If the directory containing the - parsed file has the Option - IncludesNOEXEC set, and the including the document would - cause a program to be executed, then it will not be - included; this prevents the execution of CGI scripts. - Otherwise CGI scripts are invoked as normal using the - complete URL given in the command, including any query - string.
- -An attribute defines the location of the document; the - inclusion is done for each attribute given to the include - command. The valid attributes are:
- -../
, nor can it be an absolute path.
- Therefore, you cannot include files that are outside of the
- document root, or above the current document in the directory
- structure.
- The virtual
attribute should always be used
- in preference to this one.The value is a (%-encoded) URL-path. The URL cannot contain a - scheme or hostname, only a path and an optional query - string. If it does not begin with a slash (/) then it is - taken to be relative to the current document.
- -A URL is constructed from the attribute, and the output the - server would return if the URL were accessed by the client - is included in the parsed output. Thus included files can - be nested.
- -If the specified URL is a CGI program, the program will - be executed and its output inserted in place of the directive - in the parsed file. You may include a query string in a CGI - url:
+fsize
command.
+ This command inserts the text of another document or file
+ into the parsed file. Any included file is subject to the
+ usual access control. If the directory containing the
+ parsed file has Options
+ IncludesNOEXEC
set, then only documents with
+ a text MIME type (text/plain
, text/html
+ etc.) will be included. Otherwise CGI scripts are invoked as normal
+ using the complete URL given in the command, including any query
+ string.
An attribute defines the location of the document; the + inclusion is done for each attribute given to the include + command. The valid attributes are:
+ +file
../
, nor can it be an absolute path.
+ Therefore, you cannot include files that are outside of the
+ document root, or above the current document in the directory
+ structure. The virtual
attribute should always be
+ used in preference to this one.virtual
The value is a (%-encoded) URL-path. The URL cannot contain a + scheme or hostname, only a path and an optional query string. If it + does not begin with a slash (/) then it is taken to be relative to the + current document.
+ +A URL is constructed from the attribute, and the output the + server would return if the URL were accessed by the client is + included in the parsed output. Thus included files can be nested.
+ +If the specified URL is a CGI program, the program will be + executed and its output inserted in place of the directive in the + parsed file. You may include a query string in a CGI url:
-include virtual
should be used in preference
- to exec cgi
to include the output of CGI
- programs into an HTML document.
include virtual
should be used in preference
+ to exec cgi
to include the output of CGI programs
+ into an HTML document.
This prints out a listing of all existing variables and
- their values. Starting with Apache 1.3.12, special characters
- are entity encoded (see the echo
element for details)
+ their values. Special characters are entity encoded (see the echo
element for details)
before being output. There are no attributes.
For example:
- -The printenv element is available only in - Apache 1.2 and above.
-This sets the value of a variable. Attributes:
-var
value
For example:
- -The set element is available only in - Apache 1.2 and above.
-DATE_GMT
DATE_LOCAL
DOCUMENT_NAME
DOCUMENT_URI
LAST_MODIFIED
QUERY_STRING_UNESCAPED
&
etc. are
+ preceded by backslashes).Variable substitution is done within quoted strings in most
cases where they may reasonably occur as an argument to an SSI
directive. This includes the config
,
exec
, flastmod
, fsize
,
include
, echo
, and set
- directives, as well
- as the arguments to conditional operators. You can insert a
- literal dollar sign into the string using backslash
+ directives, as well as the arguments to conditional operators.
+ You can insert a literal dollar sign into the string using backslash
quoting:
If a variable reference needs to be substituted in the middle of a character sequence that might otherwise be @@ -419,157 +414,162 @@ disambiguated by enclosing the reference in braces, a la shell substitution:
-This will result in the Zed
variable being set
to "X_Y
" if REMOTE_HOST
is
"X
" and REQUEST_METHOD
is
"Y
".
EXAMPLE: the below example will print "in foo" if the - DOCUMENT_URI is /foo/file.html, "in bar" if it is - /bar/file.html and "in neither" otherwise:
- -The below example will print "in foo" if the
+ DOCUMENT_URI
is /foo/file.html
, "in bar"
+ if it is /bar/file.html
and "in neither" otherwise:
These are available in Apache 1.2 and above. The basic flow - control elements are:
- -The if
element works like an
- if statement in a programming language. The test condition is
- evaluated and if the result is true, then the text until the
- next elif
,
- else
. or
- endif
element is included in the
- output stream.
The elif
or
- else
statements are be used the
- put text into the output stream if the original test_condition
- was false. These elements are optional.
The basic flow control elements are:
-The endif
element ends the
- if
element and is required.
test_condition is one of the following:
- -The if
element works like an if statement in a
+ programming language. The test condition is evaluated and if
+ the result is true, then the text until the next elif
,
+ else
or endif
element is included in the
+ output stream.
The elif
or else
statements are be used
+ to put text into the output stream if the original
+ test_condition was false. These elements are optional.
egrep
command.The endif
element ends the if
element
+ and is required.
test_condition is one of the following:
-string
string1 = string2
+ string1 != string2
Compare string1 with string2. If
+ string2 has the form /string2/
+ then it is treated as a regular expression. Regular expressions are
+ implemented by the PCRE engine and
+ have the same syntax as those in perl
+ 5.
If you are matching positive (=
), you can capture
+ grouped parts of the regular expression. The captured parts are
+ stored in the special variables $1
..
+ $9
.
string1 < string2
+ string1 <= string2
+ string1 > string2
+ string1 >= string2
strcmp(3)
). Therefore the string "100" is less than
+ "20".( test_condition )
! test_condition
test_condition1 &&
+ test_condition2
test_condition1 ||
+ test_condition2
"=" and "!=" bind more tightly than - "&&" and "||". "!" binds +
"=
" and "!=
" bind more tightly than
+ "&&
" and "||
". "!
" binds
most tightly. Thus, the following are equivalent:
Anything that's not recognized as a variable or an operator
is treated as a string. Strings can also be quoted:
- 'string'. Unquoted strings can't contain whitespace
+ 'string'
. Unquoted strings can't contain whitespace
(blanks and tabs) because it is used to separate tokens such as
variables. If multiple strings are found in a row, they are
concatenated using blanks. So,
string1 string2 results in string1 string2-
'string1 string2' results in string1 string2-
There is a document - which describes how to use the features of mod_include to offer - internationalized customized server error documents.
- -Files processed for server-side includes no longer accept
- requests with PATH_INFO (trailing pathname information) by
- default. You can use the
string1 string2
results in string1 string2
+
+ and
+
+ 'string1 string2'
results in string1 string2
.
This directive changes the string that mod_include looks for - to mark the end of an include element.
+This directive changes the string that
This directive changes the string that mod_include displays - when a variable is not set and "echoed".
+This directive changes the string that
The SSIErrorMsg directive changes the error message displayed
- when mod_include encounters an error. For production servers you
- may consider changing the default error message to
- "<!-- Error -->"
so that the message
- is not presented to the user.
-
The "<!-- Error -->"
so that
+ the message is not presented to the user.
This directive has the same effect as the <!--#config
- errmsg=message -->
element.
This directive changes the string that mod_include looks for - to mark an include element to process.
+This directive changes the string that
You may want to use this option if you have 2 servers parsing the output of a file each processing different commands (possibly at different times).
-The example given above, in conjunction with a matching @@ -662,94 +649,81 @@ an unset variable is echoed allow you to use SSI directives as shown in the example below:
-This directive changes the format in which date strings are displayed - when echoing DATE environment variables. The formatstring - is as in strftime(3) from the C standard library.
+ when echoingDATE
environment variables. The
+ formatstring is as in strftime(3)
from the
+ C standard library.
This directive has the same effect as the <!--#config
- timefmt=formatstring -->
element.
The above directive would cause times to be displayed in the format "22:26, June 14, 2002".
-The XBitHack directives controls the parsing of ordinary
- html documents. This directive only affects files associated
- with the MIME type text/html
. XBitHack can take on
- the following values:
The text/html
.
off
on
but also test the group-execute bit.
- If it is set, then set the Last-modified date of the
- returned file to be the last modified time of the file. If
- it is not set, then no last-modified date is sent. Setting
- this bit allows clients and proxies to cache the result of
- the request.
-
- #include
a CGI
- or otherwise produces different output on each hit (or could
- potentially change on subsequent requests).on
text/html
file that has the user-execute bit
+ set will be treated as a server-parsed html document.full
on
but also test the group-execute bit.
+ If it is set, then set the Last-modified
date of the
+ returned file to be the last modified time of the file. If
+ it is not set, then no last-modified date is sent. Setting
+ this bit allows clients and proxies to cache the result of
+ the request.
+
+ You would not want to use the full option, unless you assure the
+ group-execute bit is unset for every SSI script which might #include
a CGI or otherwise produces different output on
+ each hit (or could potentially change on subsequent requests).