[NCLUG] apache .htaccess question...

Joshua SS Miller joshua at fitsnips.net
Thu Oct 17 12:16:18 MDT 2002


But do not do it on <Directory />  use the web directory section.  Other
wise you are opening up your root(/) file systems to potential
compromise.  Also, unless you have a really good reason, do not use All.
Only open the options you need for the specific application.

Joshua SS Miller


On Thu, 2002-10-17 at 12:10, Mike Loseke wrote:
> Thus spake Gabriel L. Somlo:
> > 
> > In my past experience, commenting out the following section helped:
> > 
> > <Directory />
> >     Options FollowSymLinks
> >     AllowOverride None
> > </Directory>
> > 
> > I.e., if you set AllowOverride None for / then no matter what you do
> > for any user home directories, the .htaccess files won't matter.
> > Commenting out that section and restarting httpd was what did it for
> > me.
> > 
> > Hope this helps,
> 
>  Changing it to "AllowOverride All", or some acceptable subset (check
> http://httpd.apache.org for the docs), may be the more correct method.
> 
> -- 
>    Mike Loseke    | Eagles may soar, but weasels
>  mike at verinet.com | aren't sucked into jet engines.
> _______________________________________________
> NCLUG mailing list       NCLUG at nclug.org
> 
> To unsubscribe, subscribe, or modify your settings, go to:
> http://www.nclug.org/mailman/listinfo/nclug





More information about the NCLUG mailing list