About Apache

[Kevin Pang]

I installed Awstat, the log report url is something like
http://www.mydomain.com/awstats/awstats.pl, I added password protection for
the directory /awstats, everything works fine. But I found someone accessed
the url http://www.mydomain.com/cgi-bin/awstats.pl, it's supposed to be a
404 error, but it is redirected to
http://www.mydomain.com/awstats/awstats.pl . My question is why the url
http://www.mydomain.com/cgi-bin/awstats.pl is working, any other options to
make it work besides rewrite, alias and link. Thanks!

Here is all related lines in httpd.conf:
-----------
ScriptAlias /cgi-bin/ "/usr/local/www/cgi-bin/"

ScriptAlias /awstats/ "/usr/local/etc/awstats/wwwroot/cgi-bin/"
<Directory "/usr/local/etc/awstats/wwwroot">
Options None
AllowOverride authconfig
Order allow,deny
Allow from All
</Directory>
-----------
Output of "ll /usr/local/www/cgi-bin/",  nothing is related to /awstats/
-rw-r--r--  1 root  wheel    0 Nov  3 17:24
EXAMPLE_DIRECTORY-DONT_ADD_OR_TOUCH_ANYTHING
-rw-r--r--  1 root  wheel  274 Nov  3 17:24 printenv
-rw-r--r--  1 root  wheel  757 Nov  3 17:24 test-cgi