Return-Path: 
 <users-return-50037-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: (qmail 50789 invoked from network); 23 Feb 2005 18:02:12 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur-2.apache.org with SMTP; 23 Feb 2005 18:02:12 -0000
Received: (qmail 81048 invoked by uid 500); 23 Feb 2005 18:02:02 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 81035 invoked by uid 500); 23 Feb 2005 18:02:02 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 81009 invoked by uid 99); 23 Feb 2005 18:02:02 -0000
X-ASF-Spam-Status: No, hits=0.1 required=10.0
	tests=FORGED_RCVD_HELO
X-Spam-Check-By: apache.org
Received-SPF: pass (hermes.apache.org: local policy)
Received: from 69-155-205-10.ded.swbell.net (HELO freya.xtria.com)
 (69.155.205.10)
  by apache.org (qpsmtpd/0.28) with ESMTP; Wed, 23 Feb 2005 10:02:01 -0800
Received: from corp02.corp.xtria.com ([172.20.0.21])
	by freya.xtria.com (8.13.2/8.13.2/Debian-1) with ESMTP id j1NI1vLY003509
	for <users@httpd.apache.org>; Wed, 23 Feb 2005 12:01:58 -0600
Received: from va02.va.corp.xtria.com ([172.20.8.4]) by corp02.corp.xtria.com
 with Microsoft SMTPSVC(5.0.2195.6713);
	 Wed, 23 Feb 2005 12:01:57 -0600
X-MimeOLE: Produced By Microsoft Exchange V6.0.6603.0
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Wed, 23 Feb 2005 13:01:56 -0500
Message-ID: <225735BE378BA7489D57D942F109AF69836D73@va02.va.corp.xtria.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [users@httpd] Limit POST, PUT methods
Thread-Index: AcUZzVwNkpX/EkgqTX+u5KHoJoD6+AAA6FjQ
From: "Warron French" <wfrench@xtria.com>
To: <users@httpd.apache.org>
X-OriginalArrivalTime: 23 Feb 2005 18:01:57.0791 (UTC)
 FILETIME=[C40C0AF0:01C519D1]
X-Scanned-By: MIMEDefang 2.45
X-Virus-Checked: Checked
Subject: RE: [users@httpd] Limit POST, PUT methods
X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N

Robert, I read this article already.

So, I wonder if maybe you can give me a more clear instruction.

If I want to not allow users to use PUT or POST do I use Limit or =
LimitExcept, from what I can tell it looks like the book I am reading =
from ORA -- Apache the Definitive Guide is saying that access-control =
directives should NOT be placed within a <Limit> section but it doesn't =
exactly say to place them in a <LimitExcept> section either.

All I want to do is allow only GET for this website I am working on =
since it is a government server and I need to secure it. =20

Would I perhaps do:


<Limit GET>
   Require valid-user
</Limit>

Or would I do:
<LimitExcept GET>
	Require valid-user
</LimitExcept>

I just want to learn this and secure the website.



Warron French
Sr. Network Engineer
Xtria, LLC

-----Original Message-----
From: Nelson, Robert D. [mailto:RDNelson@Mail.Donaldson.com]
Sent: Wednesday, February 23, 2005 12:28 PM
To: 'users@httpd.apache.org'
Subject: RE: [users@httpd] Limit POST, PUT methods


Warron:

Post in plain text please!

> Can anyone tell me where I would put a Limit directive?
>=20
> Do I put it into a .htaccess file in the root directory of the =
website,
> or do I place it in the httpd.conf file inside of a Directory =
directive
> statement?

You can put it in either place. See the docs:

http://httpd.apache.org/docs-2.0/mod/core.html#limit.

 ~ Robert


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server =
Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org