httpd-docs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "William A. Rowe, Jr." <wr...@rowe-clan.net>
Subject Unless I'm terribly confused
Date Mon, 31 Dec 2007 11:28:25 GMT
<Limit GET POST OPTIONS>
</Limit>
<LimitExcept GET POST OPTIONS>
</LimitExcept>

is a useless section.

Unfortunately, you can't have clashing (multiple) Limit's (or LimitExcepts)
in the context of a single directory.  (Of course Limit is so broken in
such respects that it needs to be redone from the ground up).

<Directory "/home/*/public_html">
     AllowOverride FileInfo AuthConfig Limit Indexes
     Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
     <Limit GET POST OPTIONS>
         Order allow,deny
         Allow from all
     </Limit>
     <LimitExcept GET POST OPTIONS>
         Order deny,allow
         Deny from all
     </LimitExcept>
</Directory>

should actually have been

<Directory "/home">
         Order deny,allow
         Deny from all
</Directory>

<Directory "/home/*/public_html">
     AllowOverride FileInfo AuthConfig Limit Indexes
     Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
     <Limit GET POST OPTIONS>
         Order allow,deny
         Allow from all
     </Limit>
</Directory>

which in effect denies all others by not overriding for other methods.

Right?  Or have I lost my mind altogether?

Bill

---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org


Mime
View raw message