httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Sean Davis <sdav...@mail.nih.gov>
Subject Re: [users@httpd] Filename Access
Date Thu, 29 Dec 2005 18:51:43 GMT



On 12/29/05 1:31 PM, "httpd2@karsites.net" <httpd2@karsites.net> wrote:

> 
> Hi Sean.
> 
> I'm usiing Apache 2 on SuSE Linux 9.2 pro.
> 
> The config is split over many different files.
> 
> I include my own custom config file that has different
> directory settings, such as:
> 
> 
> <Directory /srv/www/htdocs/KAR/websites/test/PHP>
>     Options None
>     Order deny,allow
>     Deny from all
>     <Files *.php>
>         Order deny,allow
>         Deny from all
>     </Files>
> </Directory>
> 
> But I can still access a php file called get_vars.php
> in the forbidden directory that displays the content of the
> $_SERVER array:
> 
> <?php
> echo "<br />contents of \$_SERVER[] <br />";
> while(list($key, $value) = each($_SERVER))
>    {
>    echo "$key => $value <br />";
>    }
> ?>

I'm not an apache expert, so I might be missing an obvious problem with your
config file, but it looks OK at first glance.  Since you say that you have a
complicated, multifile config, are you sure that you are actually reading
this config file?  Are you sure that you aren't later overriding it with
another directive on the same directory?

Sean



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message