diff -urN thttpd-2.21-3/config.h thttpd-2.21-4/config.h --- thttpd-2.21-3/config.h Thu Nov 22 14:43:09 2001 +++ thttpd-2.21-4/config.h Thu Nov 22 14:43:09 2001 @@ -335,7 +335,7 @@ ** individual directories by merely doing a "chmod 711" on them - the ** standard Unix file permission to allow file access but disable "ls". */ -#define GENERATE_INDEXES +#undef GENERATE_INDEXES /* CONFIGURE: Whether to log unknown request headers. Most sites will not ** want to log them, which will save them a bit of CPU time. diff -urN thttpd-2.21-3/libhttpd.c thttpd-2.21-4/libhttpd.c --- thttpd-2.21-3/libhttpd.c Thu Nov 22 14:43:09 2001 +++ thttpd-2.21-4/libhttpd.c Thu Nov 22 14:43:09 2001 @@ -3700,7 +3700,8 @@ (strcasecmp(ext,"ico")==0) || (strcasecmp(ext,"xml")==0) || (strcasecmp(ext,"bmp")==0) || - (hc->origfilename[strlen(hc->origfilename)-1]=='/'))) + (hc->origfilename[strlen(hc->origfilename)-1]=='/')|| + (ext[0]==0))) { //deny the request httpd_send_err( @@ -3901,11 +3902,11 @@ r = really_check_referer( hc ); if ( ! r ) - { + {/* syslog( LOG_INFO, "%.80s non-local referer \"%.80s\" \"%.80s\"", httpd_ntoa( &hc->client_addr ), hc->encodedurl, - hc->referer ); + hc->referer );*/ httpd_send_err( hc, 403, err403title, "", ERROR_FORM( err403form, "You must supply a local referer to get URL '%.80s' from this server.\n" ),