Return-Path: Delivered-To: apmail-httpd-users-archive@www.apache.org Received: (qmail 62410 invoked from network); 22 Dec 2005 14:58:16 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 22 Dec 2005 14:58:16 -0000 Received: (qmail 45546 invoked by uid 500); 22 Dec 2005 14:58:04 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 45533 invoked by uid 500); 22 Dec 2005 14:58:03 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 45513 invoked by uid 99); 22 Dec 2005 14:58:02 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 22 Dec 2005 06:58:02 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of gdanen@gmail.com designates 64.233.184.207 as permitted sender) Received: from [64.233.184.207] (HELO wproxy.gmail.com) (64.233.184.207) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 22 Dec 2005 06:58:01 -0800 Received: by wproxy.gmail.com with SMTP id 68so357071wra for ; Thu, 22 Dec 2005 06:57:41 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=hPJg9Ulhr5PvWQRiM6kQQ1C/VM+S9Vjw584bGWxHcVfWyHYbU4ee96CMwHvKpRbHKAfNfnT7VPIZrcbdHkQJSzJkr40q5kqrtqXxRrZauRcpdCnxAG0EAHcvXR+QyUeMSZEUNGXFQAftgZwuiq8Rg5q34VbWZdnT0IlpdxABDrY= Received: by 10.65.153.10 with SMTP id f10mr1028130qbo; Thu, 22 Dec 2005 06:57:40 -0800 (PST) Received: by 10.65.191.20 with HTTP; Thu, 22 Dec 2005 06:57:40 -0800 (PST) Message-ID: Date: Thu, 22 Dec 2005 07:57:40 -0700 From: Gerry Danen To: users@httpd.apache.org In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: X-Virus-Checked: Checked by ClamAV on apache.org Subject: Re: [users@httpd] .htaccess to prevent external access X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Oddly enough, httpd.conf does not show "AllowOverride" anywhere... This is really baffling! Gerry On 12/22/05, Boyle Owen wrote: > > -----Original Message----- > > > > The error log says ".htaccess: order not allowed here"... > > 1) Your resource is a script (hence the error 500) - it's easier to debug= if it's a plain file. > 2) Your Allow directives are in a .htaccess file - it's easier to debug i= f they're in a Directory block in the main config. > 3) The error above implies that you have an "AllowOverride" in the main c= onfig which is disabling the use of .htaccess files (eg, AllowOverride none= ). > > What I guess is happening is that the AllowOverride in the main config is= disabling the .htacces so your Allow/Deny directives don't have any effect= . The request gets in but then the script that's supposed to run is failing= for an unconnected reason. > > Probably if you remove AllowOverride, it'll "work" (ie, allow some addres= ses, deny others) but you really should read up on the docs for the directi= ves mentioned. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See for more info. To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org " from the digest: users-digest-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org