Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-19 Thread Sheryl
Hi Sheryl, > > Thanks for your reply. > > I'm not sure how can I give users a better solution as they need .htaccess > files on their webroot. Sorry about the delay in replying. I didn't have time to read the list last week. As I think I said, it all depends upon the circumstances. If you're d

Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-11 Thread James Corteciano
Hi Sheryl, Thanks for your reply. I'm not sure how can I give users a better solution as they need .htaccess files on their webroot. Regards, James On Thu, Jul 8, 2010 at 11:42 PM, Sheryl wrote: > > Hi All, > > > > I would like to hear your idea's of what are the pros and cons if I will > > s

Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-08 Thread Sheryl
> Hi All, > > I would like to hear your idea's of what are the pros and cons if I will > set > a specific directive-type for AllowOverride like AuthConfig, > FileInfo,Indexes, Limit, and Options? Most security guidelines say no to Indexes. It's tolerable to do allow overrides an most things for a

Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-08 Thread James Corteciano
Hi Scott, That helps. Thanks. James On Thu, Jul 8, 2010 at 2:40 PM, Scott Gifford wrote: > On Thu, Jul 8, 2010 at 2:28 AM, James Corteciano > wrote: > [ ... ] > >> I am just concern about security matters that will produce if I will give >> the user full access on .htaccess (AllowOverride All)

Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-07 Thread Scott Gifford
On Thu, Jul 8, 2010 at 2:28 AM, James Corteciano wrote: [ ... ] > I am just concern about security matters that will produce if I will give > the user full access on .htaccess (AllowOverride All) on their webroot? > AllowOverride All effectively allows a user who can create a .htaccess file to ac

[us...@httpd] AllowOverride: Pros and Cons

2010-07-07 Thread James Corteciano
Hi All, I would like to hear your idea's of what are the pros and cons if I will set a specific directive-type for AllowOverride like AuthConfig, FileInfo,Indexes, Limit, and Options? I am just concern about security matters that will produce if I will give the user full access on .htaccess (Allo