httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Joshua Slive" <jos...@slive.ca>
Subject Re: [users@httpd] web server with and without WebDAV (two directories)
Date Tue, 30 Oct 2007 13:43:02 GMT
On 10/30/07, Stefan Bertels <post@stefan-bertels.de> wrote:
> On Fri, 26 Oct 2007, Joshua Slive wrote:
> > Use RemoveHandler (or RemoveFilter) to remove the file-extension
> > mappings in those directories.
>
> Thanks for the fast answer. I might add additional handlers later and
> have to remove them in each web dav folder individually. If I
> forget this I get some insecure server. This is sub-optimal.
>
> Is there an easy solution to have some standard apache server
> (including php and all the other features, additional handlers etc) and
> use this server with WebDAV, too?
>
> I tried to enable WebDAV only for sub-directories, but this was not
> successful (perhaps because the WebDAV client = MS Windows
> Explorer tries to access the root using WebDAV, too).

If you are doing crazy things to work around client-side bugs, then
you should start by researching those bugs a little more. There is
plenty of stuff written on dealing with the screwed-up MS dav
implementations.

>
> The WebDAV folders should be accessible by DAV (of course) and one
> should be able to download files using a browser. The browser mode
> should be save (no execution of anything) and just allow simple file
> download (something like "RemoveAllHandlers").
>
> If this is not possible on a per-directory basis, I would like to have
> a secure file server only (that means DAV enabled and "safe"
> browser-mode for downloads without WebDAV client).

You can use
SetHandler default-handler
but watch out for filters and magic mime types that could get around this.

Another solution is to make sure you add handlers and filters only for
specific directories, and then use an Alias to map some requests out
to "clean" directories that don't have anything activated.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message