Hello,

On Thu, Feb 11, 2016 at 10:56 PM, Toomas Aas <toomas....@reach-u.com> wrote:
>
> Approach 1:
> -------------------------------------
> RewriteCond %{REQUEST_METHOD} OPTIONS
> RewriteRule .* - [R=405,L]
> -------------------------------------

You also need to set:
  RewriteOptions AllowAnyURI
for this to work.

But since this option could open some dangerous doors (see [1]), I
also suggest to use something like:
  RewriteRule ^[^/] - [R=403,L]
just after "Approach 1" above, so to deny any URI not starting with '/'.

Regards,
Yann.

[1] http://httpd.apache.org/docs/2.2/mod/mod_rewrite.html#rewriteoptions

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to