In this issue

Apache Site: www.apache.org/httpd
Release: 1.3.12 (Released 25^th February 2000) (local download sites)
Beta: None
Alpha: 2.0a4 (Released 7^th June 2000) (local download sites)

Apache 1.3.12 is the current stable release. Users of Apache 1.3.11 and earlier on Unix and Windows systems should upgrade to this version. Read the Guide to 1.3.12, the Guide to 1.3.11 for information about changes between 1.3.9 and 1.3.11 and the Guide to 1.3.9 for information about changes between 1.3.6 and 1.3.9.

Most bugs listed below include a link to the entry in the Apache bug database where the problem is being tracked. These entries are called "PR"s (Problem Reports). Some bugs do not correspond to problem reports if they are found by developers.

• A security problem for users of the mass virtual hosting module, mod_vhost_alias, causes the source to a CGI to be sent if the cgi-bin directory is under the document root
• Ctrl+C is not treated as an interrupt on Windows 2000
• On Windows, only the local host name discovered by the IP stack is treated as an 'undotted' private name. This causes problems if no domain name can be identified.

Patches for bugs in Apache 1.3.12 will be made available in the apply_to_1.3.12 subdirectory of the patches directory on the Apache site. Some new features and other unofficial patches are available in the 1.3 patches directory. For details of all previously reported bugs, see the Apache bug database and known bugs pages. Many common configuration questions are answered in the Apache FAQ.

The majority of development work is now being focused on Apache 2.0, with the recent release of the fourth alpha.

A number of additions and fixes have been made to Apache 1.3.12 with a view to releasing Apache 1.3.13 sometime in July. The features added over the last two weeks include:

• Preparations for allowing Apache to be built using the free bcc 5.5 compiler from Borland. The first of these, a fairly substantial change, is the renaming of the alloc.h header to ap_alloc.h to avoid a name clash.
• DSO support added for BS2000 and OS/390 USS platforms
• Changes to the Windows build process to eliminate duplicate references for exported libraries and remove libraries included by Microsoft Visual C by default that are not required.
• Hold open the console until manually closed in Windows if the server fails to run, allowing any error message to be read
• Numerous additions and fixes to the Windows service code including cleaning up and testing the existing code, allowing graceful restarts to a service, and the prevention of starting multiple copies of a Windows 9x service with the same name.

Linux magazine have an interview with Brian Behlendorf, one of the initial Apache group founders. In addition to talking about the founding and sucess of Apache, Brian explains that the Apache name never meant "A patchy server", instead it "just sort of connoted: 'Take no prisoners. Be kind of aggressive and kick some ass.'"

Over the last week, there have been a large number of stories about Internet Appliances for both home and business use. An increasing number of these units are now being run on open source platforms such as Linux. Dell have announced that Toyota in the US are to be equipped with Dell PowerApp.web servers to provide customised content to their dealer network. The servers which will run RedHat and Apache, will periodically download information about Toyota and Lexus brands from Toyota's headquarters, and then make the information - including images, videos, and sound files - available to customers and staff via browsers.

Can we have our MR2 Roadster now?

Moreover Open Source news seems to base their newsfeed on automatic keyword recognition as this week they have picked up on the promotion of Michael S. Bahorich to the position of Executive Vice President, Exploration & Production Technology at Apache Corporation. Apache Corporation is a large gas and oil independent with operations in North America, Egypt, Western Australia, Poland and China. Oops.

"Securing Apache for AllCommerce" looks at some of the common mistakes that are made when setting up a new site. They conclude that "the only wholly secure computer is one that is turned off and locked behind the door of an impregnable vault. A truly cautious Web administrator never sleeps but remains up all night pacing the floor, worrying about who's breaking into the server."

In part two of "Learning Perl/CGI for Apache," Geeks404 show how you can use forms in your web pages to allow users to interact with your site. It's ideal for those who would like to add ways of getting feedback from users but have been daunted by the prospect of having to learn a new language. David Booss has been thorough and provided lots of examples to help get people going.

In Apache Today, Matthew Keller shows how to configure Apache and use CGI scripts to provide dynamic tables of contents for entire directory structures. It does this by looking inside directories, opening the index.html file - if it exists - and reading its <title> tag. With a little modification, the scripts in the example could be turned into simple search engines for websites.

This occasional section contains short announcements of jobs that require significant Apache experience. To see more jobs or find out how to submit your vacancy visit the Apache Week Jobs section.

Developer/Webmaster (San Diego, CA)

Linux/Apache based Internet privacy service seeking C and Perl developer with web design and maintenance experience to maintain and add services to our website and develop special-purpose Apache modules to drive it. $ + options + medical/dental. Full-time.

Multilingual Mathematics Web Dictionary Developer (Cambridge, UK)

Mathematics graduate or similar to develop multilingual web dictionary of mathematics (working language English). Good knowledge of Apache, Jserv, JDBC, plus experience in any of Java, XML, TeX, mathML, i18n, crypto, databases, collaborative authoring, or lexicography will be advantageous. Salary 18, 915 to 27, 451, initial 12-month appointment.

APACHE/JAVA ENGINEER (Mountain View, CA)

The development and integration of server-side image processing applications into a dedicated image server product. You will develop the underlying systems which will upload and manage interactive images on the server. Strong server-side experience, JAVA, APACHE, UNIX are required for a 3 month contract, possible extension. Hiring immediately! Call #831-477-4885

web admin++ (NY, USA)

New York pre-IPO startup is looking for a smart Apache/MS and Real Streaming Media Server/NT network administrator. $ + options.