}
  if( file_isdir(g.zAuxRoot,ExtFILE)!=1 ){
    zFailReason = "auxroot is not a directory";
    goto aux_not_found;
  }
  zPath = mprintf("%s/%s", g.zAuxRoot, zName);
  nRoot = (int)strlen(g.zAuxRoot);
  if( file_isfile(zPath, ExtFILE) ){
    nScript = (int)strlen(zPath);
    zScript = zPath;
  }else{
    for(i=nRoot+1; zPath[i]; i++){
      char c = zPath[i];
      if( (c=='.' || c=='-') && zPath[i-1]=='/' ){
        zFailReason = "path element begins with '.' or '-'";
        goto aux_not_found;
      }
      if( !fossil_isalnum(c) && c!='_' && c!='-' && c!='.' ){
        zFailReason = "illegal character in path";
        goto aux_not_found;
      }
      if( c=='/' ){
        int isDir, isFile;
        zPath[i] = 0;
        isDir = file_isdir(zPath, ExtFILE);
        isFile = isDir==2 ? file_isfile(zPath, ExtFILE) : 0;
        zPath[i] = c;
        if( isDir==0 ){
          zFailReason = "path does not match any file or script";
          goto aux_not_found;
        }
        if( isFile!=0 ){
          zScript = mprintf("%.*s", i, zPath);
          nScript = i;
          break;
        }
      }
    }
  }
  if( nScript==0 ){
    zFailReason = "path does not match any file or script";
    goto aux_not_found;
  }
  if( !file_isexe(zScript, ExtFILE) ){
    const char *zMime;
    /* File is not executable.  Must be a regular file.  In that case,
    ** disallow extra path elements */
    if( zPath[nScript]!=0 ){
      zFailReason = "extra path elements after filename";
      goto aux_not_found;
    }
    zMime = mimetype_from_name(zScript);
    if( zMime==0 ) zMime = "application/octet-stream";
    cgi_set_content_type(zMime);
    blob_read_from_file(cgi_output_blob(), zScript, ExtFILE);
    return;
  }
  /* If we reach this point, that means we are dealing with an executable
  ** file name zScript.  Run that file as CGI. */
  login_check_credentials();

aux_not_found:
  fossil_free(zPath);
  cgi_set_status(404, "Not Found");
  @ %h(zFailReason)
  return;

  skin_override();
  zNotFound = find_option("notfound", 0, 1);
  noJail = find_option("nojail",0,0)!=0;
  allowRepoList = find_option("repolist",0,0)!=0;
  g.useLocalauth = find_option("localauth", 0, 0)!=0;
  g.sslNotAvailable = find_option("nossl", 0, 0)!=0;
  g.fNoHttpCompress = find_option("nocompress",0,0)!=0;
  g.zAuxRoot = find_option("auxroot",0,1);
  zInFile = find_option("in",0,1);
  if( zInFile ){
    backoffice_disable();
    g.httpIn = fossil_fopen(zInFile, "rb");
    if( g.httpIn==0 ) fossil_fatal("cannot open \"%s\" for reading", zInFile);
  }else{
    g.httpIn = stdin;

  const char *zIpAddr;    /* IP address of remote client */

  Th_InitTraceLog();
  login_set_capabilities("sx", 0);
  g.useLocalauth = 1;
  g.httpIn = stdin;
  g.httpOut = stdout;
  g.zAuxRoot = find_option("auxroot",0,1);
  find_server_repository(2, 0);
  g.cgiOutput = 1;
  g.fNoHttpCompress = 1;
  g.fullHttpReply = 1;
  zIpAddr = cgi_ssh_remote_addr(0);
  if( zIpAddr && zIpAddr[0] ){
    g.fSshClient |= CGI_SSH_CLIENT;

  const char *zStopperFile;    /* Name of file used to terminate server */
  zStopperFile = find_option("stopper", 0, 1);
#endif

  if( g.zErrlog==0 ){
    g.zErrlog = "-";
  }
  g.zAuxRoot = find_option("auxroot",0,1);
  zFileGlob = find_option("files-urlenc",0,1);
  if( zFileGlob ){
    char *z = mprintf("%s", zFileGlob);
    dehttpize(z);
    zFileGlob = z;
  }else{
    zFileGlob = find_option("files",0,1);