> > > Since this isn't obvious for the casual user, I propose that the >> following be included in httpd.conf: >> >> <Files global.asa> >> Order deny,allow >> Deny from all >> </Files> >> >... >Another option users have is to locate the global.asa to >some other directory that is not www browsable: > > PerlSetVar Global /cannot/browse/this/path
FWIW we always put the global.asa outside of the html tree. The purpose of the global.asa file is not to be exposed to the httpd server, so it doesn't belong there unless its intentionally being exposed, as with Joshua's examples Ellers --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]