httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Alexei Kosut <>
Subject Re: setting handlers from .htaccess
Date Fri, 10 Jan 1997 02:19:30 GMT
On Thu, 9 Jan 1997, Rob Hartill wrote:

> A bugs mail user reports that users can invoke the status/info modules
> from .htaccess files even though the main server config has "strict"
> access permissions based on IP addresses.
> Is there any way to prevent these handlers kicking in if .htaccess files
> are allowed to map any <File> to the offending handler ?

Hmm. Not really. It has nothing to do with <File>, actually. You can
just put a SetHandler directive into an .htaccess file plain, and it
will function as advertised.

It's an interesting thought, though... there probably could be a way
to configure which handlers an .htaccess file is allowed to use.

Alexei Kosut <>      The Apache HTTP Server

View raw message