httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Matthew Daubenspeck <m...@oddprocess.org>
Subject Re: .htaccess file retrieved by browser
Date Fri, 17 May 2002 00:03:23 GMT
<Files ~ "^\.ht">
    Order allow,deny
    Deny from all
</Files>

Try that in httpd.conf

On Thu, May 16, 2002 at 07:12:51PM -0500, Dummy wrote:
> Hello folks,
> 
> I've rented a FreeBSD 4.4 virtual server with Apache/1.3.12 OpenSSL/0.9.6a
> installed. The providers are a Verio subsidiary (or I think it's Verio
> itself), formerly iServer.com
> 
> The problem I have is I'm able to retrieve with a browser the .htaccess file
> from any directory of my site.
> 
> I tried to perform many web and maillist archives searches, but none of the
> different wordings I chose brought any useful result.
> 
> I've used a .htaccess file to allow directory indexing in a particular
> directory within the site, and the IndexIgnore directive makes this file
> invisible to the browser.
> 
> But when I tried to request the file directly (e.g.
> http://site.com/dir/.htaccess), with surprise I found Apache served the
> file, and I was able to read it as plain text.
> 
> I tested this in some other directories and the result was the same.
> 
> I don't know if this behavior occurs by design, or is a reported bug in
> Apache, or even if it is a particular configuration problem.
> 
> Isn't Apache supposed not to serve this kind of files? Is there some
> httpd.conf directive I can turn on to solve this?
> 
> Because of some hosting clients I have, I strictly need to be able to use
> .htaccess files.
> 
> Thanks in advance,
> Andres Bianciotto
> an 'Argie' in Mexico
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message