Return-Path: 
 <users-de-return-1316-apmail-httpd-users-de-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-de-archive@httpd.apache.org
Received: (qmail 74422 invoked by uid 500); 13 Jan 2003 08:13:49 -0000
Mailing-List: contact users-de-help@httpd.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:users-de-help@httpd.apache.org>
list-unsubscribe: <mailto:users-de-unsubscribe@httpd.apache.org>
list-post: <mailto:users-de@httpd.apache.org>
Reply-To: users-de@httpd.apache.org
Delivered-To: mailing list users-de@httpd.apache.org
Delivered-To: moderator for users-de@httpd.apache.org
Received: (qmail 59845 invoked from network); 13 Jan 2003 07:25:19 -0000
Date: Mon, 13 Jan 2003 08:25:28 +0100
From: Thomas Bader <thomasb@trash.net>
To: users-de@httpd.apache.org
Subject: Re: Loesung: SetEnvIfNoCase - .htaccess Problem
Message-ID: <20030113072528.GA8936@undomiel.dawnlink.net>
References: <JOECJDIJFMCLIADEAGOFEEGDCKAA.stp@gaynet.at>
 <JOECJDIJFMCLIADEAGOFKEGGCKAA.stp@gaynet.at>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
In-Reply-To: <JOECJDIJFMCLIADEAGOFKEGGCKAA.stp@gaynet.at>
User-Agent: Mutt/1.4i
Organization: [intentionally left blank]
X-PGP-Key: <https://trash.net/~thomasb/contact/>
X-OS: Linux 2.4.20 (sparc64)
X-Uptime: 08:23:12 up 14 days
X-WM: Enlightenment 0.16.5
X-Wiretapping: Bomb Afghanistani Arafat Iraq Heroin Gun RAF Kuba Castro Laden
 PLO Sudan WTC MP3 - this is to prevent security agencies from spying on our
 emails and endanger the very freedom they try to defend. Please install and
 use cryptography (http://www.gnupg.org)
X-Editor: Vim-601 http://www.vim.org
X-XMMS: 02-das_ich-kindgott
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N

* Peter Stoehr <stp@gaynet.at> [030113 01:51]:
> [...]
> Zu guter Letzt wird im Verzeichnis /secure/images noch eine .htaccess mit
> folgenden Inhalt erstellt:
> 
> SetEnvIfNoCase Referer intranet intra_site_referal=1
> <FilesMatch ".(gif|jpg|jpeg|png)">
>     Order allow,deny
>     allow from env=intra_site_referal
> </FilesMatch>

Die Loesung ist ziemlich unschoen.  Es gibt viele Leute, die
ihren Browser oder Proxy so konfiguriert haben, dass er
_keinen_ Referer mitschickt, selbst wenn er koennte.

-- 
<https://trash.net/~thomasb/>   PGP and OpenPGP encrypted mail preferred.
"A million dead poets would gladly attest: heart-ache's a keepsake
 to remind us we're living."
	-- Skyclad - Isn't What It Used To Be

--------------------------------------------------------------------------
                Apache HTTP Server Mailing List "users-de" 
      unsubscribe-Anfragen an users-de-unsubscribe@httpd.apache.org
           sonstige Anfragen an users-de-help@httpd.apache.org
--------------------------------------------------------------------------