presented the release of http server apache 2.4.65 , in which corrected critical error in Mod_rewrite, due to which the conditions set through the expression “rewriteCond” have always returned the meaning of “true”, i.e. The rules have always been triggered, regardless of the data verified. The expression “REWRITECOND” is the key in mod_REWRITE and is used to check the conditions in most situations.
The problem is caused by incorrect Change in the last issue and manifests itself only in the Apache HTTPD 2.4.64 version. In version 2.4.64, to determine the result of the audit, it was Added The transfer of Cond_return_type, which could take the values of Cond_rc_nomatch, Cond_rc_Match and Cond_rc_status_Set. Moreover, in the code exhibited Only the value of Cond_rc_Match, regardless of the result of the processing of regular expression (only a negative value with the error code was checked, but the zero value issued in case of mismatch was not taken into account).