/////////////////////////////////////////////////////////////////////////////
// Improved mod_frontpage                                                  //
// for Apache 1.3.19                                                       //
// v1.6 - Februar 03, 2002                                                 //
// Copyright (C) 2001 Christof Pohl <chripo+frontpage@edo.uni-dortmund.de> //
// APXS install by Jean-Michel Dault <jmdault@mandrakesoft.com             //
// Port to Frontpage 5.x by Martin Blapp <mbr@freebsd.org>                 //
/////////////////////////////////////////////////////////////////////////////
// WorldWideWeb: http://home.edo.uni-dortmund.de/~chripo                   //
// FTP: ftp://ftp.edo.uni-dortmund.de/pub/mod_frontpage                    //
/////////////////////////////////////////////////////////////////////////////

This product includes software developed by the Apache Group for use in the
Apache HTTP server project (http://www.apache.org/).

PLANS
=====
	   Have the user choose the help language if he installs the port. At the
           moment the language ID seems to be hardcoded for some strange reason.

	   Use autoconf and configure instead of a perl Makefile.

           Switch to cvs to maintain this project

CHANGE HISTORY
==============

01-02-05 Released 1.6.1 Major update - THIS UPDATE IS ENCOURAGED!
	Major security fixes: I found eight (8 !) local exploitable
	buffer overflows in fpexec.c. They are not present in the fpexe
	wrapper from Microsoft in Version 5 of frontpage extensions.
	I also fixed also the idention which was very bad done in some parts.
	I removed not necessary checks in fpstatic.c, so the code is
	a lot smaller. Made requests for "admin" also dependent from
	"FrontpageAdminEnable".
	I removed strcat() completly from the wrappers. Use the safe snprintf()
	instead.

02-02-04 Minor update
	Use apxs for uninstall in the Makefile. Fix Content-type for
	fpcgiadm.exe. Remove a unused string "PASSWD" I forgot to remove
	previously. Fix fpstatic handling for .htm and .css for subwebs.
	Add "make realclean" to Makefile.in to remove the Makefile also.

02-02-03 Minor update
	Improved mod_frontpage now has the administration part working.
	Instead of patching apache, I added a fpstatic handler, which
	does not run under SUID. Several checks are done for the integrity
	of the URL string. It will not run under UID 0.
	Fixed the shtml.dll translation, which was not really done in
	mod_frontpage.c Several minor security fixes.
	Improved mod_frontpage should run with Apache 1.3.15 - 1.3.23 since
	it is now a full DS0 mudule.
	Fixed the the apache httpd.conf interpreting by Makefile.PL, correctly
	replace the error log.
	Added a new httpd.conf tunables, FrontpageAdminEnable and
	FrontpageAdminDisable. The administration is turned of per
	default for security reasons.

01-12-10 Major update - upgrade to fp 5.x
	Updated the DSO port to work with Frontpage extensions 5.x.
	I removed the apache patch. There is a DSO install only from
	now on.

01-03-19 Major update - NEW APXS INSTALL!
	You can now install Improved mod_frontpage with a binary install
	of Apache! All you need is the apxs utility and the apache
	include files. Read INSTALL.APXS for more information.
	Also updated for Apache 1.3.19
	New html page for reading the doc with your browser once
	everything is installed.

01-02-21 Major update - THIS UPDATE IS ENCOURAGED!
	Included some changes which allow you to use Improved mod_frontpage
	as a true DSO module. Thanks to Adrian Hosey and Suso Banderas from
	Kiva Networking for their work!
	Changed the "tar zxf file.tar.gz" commands in the documentation to
	"gzip -dc file.tar.gz | tar xf -". This should work on nearly all
	UNIX platforms.

01-02-09 Minor update
	Updated Improved mod_frontpage to work with Apache 1.3.19.
	Changed configure switches for including Improved mod_frontpage: now
	you must use "--enable-module=frontpage" instead of the old
	"--activate-module=src/modules/frontpage/mod_frontpage.o".
	Checked my patch with mod_ssl version 2.8.0 for Apache 1.3.19: no
	problems found.

00-10-18 Minor update
	Fixed a bug that prevented Improved mod_frontpage to be compiled as
	static module. Thanks to Ian R. Justman for reporting and fixing the
	bug. :-)
	Updated the INSTALL.APACHE+FRONTPAGE+MOD_SSL+PHP4+PHP3 documentation.

00-10-17 Minor update
	Updated Improved mod_frontpage to work with Apache 1.3.14.
	Corrected some errors in the documentation. If you had problems with
	previous releases of Improved mod_frontpage, please re-read the
	detailed Stap-By-Step Guide.
	Checked my patch with mod_ssl version 2.7.1 for Apache 1.3.14: no
	problems found.

00-09-26 Major update - THIS UPDATE IS ENCOURAGED!
	Added support for setting the DocRoot and UserDir for fpEXEC (maybe
	you know this from suEXEC already). Simply use the "--fpexec-
	docroot" and "--fpexec-userdir" configure switches (thanks to Ian R.
	Justman for supplying his patch).
	Made some changes in the documentation (mostly typos). Thanks to Ken
	Yap for his input.
	Checked Improved mod_frontpage with Service Release 1.2 of the
	FrontPage 2000 Server Extensions: no problems found.
	Checked my patch with mod_ssl version 2.6.6 for Apache 1.3.12: no
	problems found.

00-03-02 Minor update
	Made a minor change on the patch that should make installation more
	easy on systems where root's main group is not "root".
	Made heavy changes on the documentation. I have splitted the README
	into several files. I have added a quick installation guide in the
	INSTALL.QUICK file. The detailed step-by-step installation guide
	has also changed a lot; I have tried to prevent confusion on the
	different users/groups and included many hints on why something
	could go wrong.

00-02-26 Major update - THIS UPDATE IS ENCOURAGED!
	Fixed security hole in fpexec.c.
	Updated mod_frontpage to work with Apache 1.3.12.
	Checked my patch with mod_ssl version 2.6.0 for Apache 1.3.12: no
	problems found.
	Changed some parts of the README to handle some frequently asked
	questions.

00-02-17 Minor update
	I changed my patchfile a bit so that using it together with mod_ssl
	2.5.0 for Apache 1.3.11 will not fail anymore. I will add an
	article to the FAQ describing the installation procedure for an
	SSL-Frontpage-Apache soon.

00-02-09 Minor update
	Fixed a bug that resulted in a compilation error when using the
	"--fpexec-umask" configure switch.

00-02-08 Minor update
	Fixed a bug that caused Apaches configure to fail with an error if
	the "--fpexec-logfile" switch was used. Man, I hope this was the
	last bug for 1.3.11... :-(

00-02-07 Minor update
	Added some sanity checks for combined configure switches. Setting
	"--suexec-caller" and "--fpexec-caller" to different values will
	result in a configure error. If "--server-uid" and "--fpexec-caller"
	do not match, configure will produce a warning message.
	Reviewed the INSTALL chapter of the README and tried to clear some
	things up there.

00-02-06 Minor update
	Added configure-switches to get rid of editing fpexec.h with a text
	editor. These switches are only valid if mod_frontpage is activated
	with "--activate-module=/src/modules/frontpage/mod_frontpage.o".
	Changed this README a bit, especially the installation and features
	chapter. I have added a new FAQ chapter also to deal with special
	problems using or installing the FrontPage Server Extensions, but
	it is quite small by now. ;-)

00-02-03 Minor update
	Fixed small bug that caused mod_frontpage to expect the fpexec stub
	to be in "/path/to/apache/sbin/fpexec", even if the configure
	switch "--sbindir=/path/to/apache/newsbin" was given.
	Changed some of the defaults in fpexec.h back to "normal" values:
	HTTPD_USER is now "nobody", UID_MIN is "100" and LOG_EXEC is now
	"/usr/local/apache/logs/fpexec_log".

00-02-01 Minor update
	Made some changes to get this to work with Apache 1.3.11.
	Fixed the "make clean" bug.
	Added automatic installation of fpexec.
	Added step-by-step installation instructions in the README.
	Changed distribution-form of this module: now it consists only of
	the README file and a patch file called "mod_frontpage-
	apache_1.3.9_1.3.11-v1.0", where 1.0 is the version of this module.

99-08-20 Minor update
	Typo in the patch cause compile errors. Boy do I feel dumb.
	Fixed some typos in README while I was at it.

99-08-19 Minor update
	Updated the patch for Apache 1.3.9: use context diff, fool!
	Set the umask(2) to a minimum safe value before we exec(3).

99-07-09 Minor update
	Fix a problem causing mod_frontpage to hang.
	Correct the module definition to match the documentation.

99-06-22
	Initial release.
