Mod_Rewrite Acting Strange

[Anon]

I have two servers using mod_rewrite and the same exact directives, but they are rewriting two different ways. I have spent hours trying to find answers to this, but haven't had any luck.
Here is the rewrite directive that is acting wacky:

/***************************************/
RewriteCond %{REQUEST_URI} ^{/tj_img/(.+)$}
RewriteRule ^{/tj_img/([0-9]+)/([0-9]+).(.+)$} /inc/getimage.php?page_id=$1&description_id=$2
/***************************************/

Now on one machine it is working properly and rewriting that as:

rewrite /tj_img/5/1.gif -> /inc/getimage.php?page_id=5&description_id=1

However, on another machine it is rewriting it as:

rewrite /tj_img/5/1.gif -> /inc/getimage.php?page_id=5/tj_img/5/1.gifdescription_id=1

For some reason the "&" character is being replaced by the entire URI...?

Any ideas, suggestions, or solutions about this issue would be much appreciated!

[Anon]

Are both of these running the same version of apache? There were some security issues with 1.3.12 that while being fixed for 1.3.14, apparently broke some functionality of mod_rewrite

[Anon]

Apache/1.3.11 is the server that is working properly.

Apache/1.3.9 is the server that is not working properly.

Does this make sense and confirm your point about the security issue?

If not, do you have any other ideas?

Thanks!

[Anon]

That wouldn't be the particular bug I was mentioning, but it might be worth looking into just upgrading to 1.3.[11:12:14] on the box that doesn't work.

If you have the time, you can try 1.3.14 first and see if that works, then you can just upgrade the other box shortly thereafter when the 1.3.14 box proves it's worth.

I've found 1.3.x all to be very reliable, and the higher rev numbers are fast (for apache) , have fewer bugs, are rock solid stable and have all the security patches on them.

That said...

Since 1.3.14 has a mod_rewrite security 'fix' that tends to break mod_rewrite rules, you probably shouldn't try 1.3.14 if you just need this to work right now. 1.3.12 should work well too.

[Anon]

I would upgrade to a newer version of apache, however I am being forced to use 1.3.9. This is the version that my client has on their servers and they cannot upgrade at this time. So, I put 1.3.9 on one of my servers simply for testing purposes (its a good thing I did too). Without being able to upgrade at this time do you have any suggestions how I can possibly work around this problem? Or do you know if it is a documented problem somewhere?

[smarlowe]

Actually, now that 1.3.19 or so is out, I'm sure they've worked out that problem with the mod_rewrite stuff.

for a comprehensive guide to mod rewrite, go here:

http://httpd.apache.org/docs/misc/rewriteguide.html