httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Joshua Slive <jos...@slive.ca>
Subject Re: [users@httpd] "Deny from All" failing in Directory and Files contexts
Date Mon, 27 Oct 2003 20:31:03 GMT

On Mon, 27 Oct 2003, Whit Blauvelt wrote:
> http://forums.gentoo.org/viewtopic.php?p=610620#610620

> <Directory /web/obfuscated>
>     Options -Indexes
>     AllowOverride None
>     Order Deny,Allow
>     Deny from All
> </Directory>

> both .ht* files and files in /web/obfuscated are still happily served.

Note you also have
<Location />
    Order Allow,Deny
    Allow from all
    Deny from env=bad_bot
    ErrorDocument 403 "
</Location>

and then carefully read the docs here:
http://httpd.apache.org/docs-2.0/sections.html#mergin

You'll see that <Location> sections are evaluated after <Directory>
sections and therefore override them.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message