Sean Davis wrote:
On 12/29/05 2:26 PM, "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote:
Sean - I have created a directory in the public area, and
added the following to my config file:
<Directory /srv/www/htdocs/KAR/websites/pub/computing/apache-test>
Options None
Order deny,allow
Deny from all
<Files *.php>
Order deny,allow
Deny from all
</Files>
</Directory>
(I restarted apache with /etc/init.d/apache2 stop, then start.)
If you go to that directory, you will get permission denied.
If you then add the following filename, get_vars.php, you
will be able to access that file - well I can from localhost
anyway.
Is this normal behaviour. I think I may need to re-write my
config files from scratch, after carefully reading the
manual.
I certainly don't see why that is the case. I hope someone else can answer
your question so that I can learn as well.
I have a restricted directory on one of my sites and I looked at my
config to see what I have listed. I also tried the same test that you
did on my site. When I try to access the directory, I get a request for
a logon and password (as expected). When I entered an invalid
password, I gave me the Authorization Required page. I then tried to
directly access a file in that directory and got exactly the same
response. Lastly I verified that I was getting the filename right by
entering the correct password when prompted and was able to access the
file. Here is an extract of my confd file if that helps. This is
obviously on a Windows based Apache.
<Directory "C:/Program Files/Apache Group/Apache2/htdocs">
AllowOverride None
Order allow,deny
Allow from all
</Directory>
#
# Allow Override for .htpasswd access to xxxFiles directory
<Directory "C:/Program Files/Apache
Group/Apache2/htdocs/K6CCC.org/xxxFiles">
AllowOverride AuthConfig
</Directory>
In the last Directory statement, it really is one line, but may split in
the E-Mail...
--
73
-------------------------------------
Jim Walls - K6CCC
[EMAIL PROTECTED]
Ofc: 818-548-4804
http://home.earthlink.net/~k6ccc
AMSAT Member 32537 - WSWSS Member 395
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
" from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
