Added extra check when accessing FCGI REQUEST_METHOD parameter as mis-configured servers may not send this. Fixes issue raised in #288

Author: ruven

ChangeLog

@@ -1,3 +1,8 @@
+24/06/2026:
+	- Added extra check when accessing FCGI REQUEST_METHOD parameter as mis-configured servers may not send this.
+	  Fixes issue raised in https://github.com/ruven/iipsrv/issues/288
+
+
 27/05/2026:
 	- Change metadata write order for JPEG output to better follow most common order in JPEG streams.
 	  Addresses part of issues raised in https://github.com/ruven/iipsrv/issues/286.

src/Main.cc

@@ -750,8 +750,13 @@ int main( int argc, char *argv[] )
 	header = FCGX_GetParam( "QUERY_STRING", request.envp );
 	request_string = (header!=NULL)? header : "";
 
-	header = FCGX_GetParam( "REQUEST_METHOD", request.envp );
-	session.headers["REQUEST_METHOD"] = header;
+	if( header = FCGX_GetParam( "REQUEST_METHOD", request.envp ) ){
+	  session.headers["REQUEST_METHOD"] = header;
+	}
+	else{
+	  if( loglevel >=2 ) logfile << "Missing FCGI REQUEST_METHOD header" << endl;
+	  throw( 400 );
+	}
 
 	// Handle OPTIONS request
 	if( session.headers["REQUEST_METHOD"] == "OPTIONS" ){
@@ -950,6 +955,16 @@ int main( int argc, char *argv[] )
 
       switch( code ){
 
+        case 400:
+	  response.setStatus( "400 Bad Request" );
+	  header = response.getHeaderResponse();
+	  writer.putS( header.c_str() );
+	  writer.flush();
+	  if( loglevel >= 2 ){
+	    logfile << "Sending HTTP 400 Bad Request" << endl;
+	  }
+	  break;
+
         case 405:
 	  response.setStatus( "405 Method Not Allowed" );
 	  header = response.getHeaderResponse();