On 18/06/17 08:22 PM, Nigel Peck wrote:
On 18/06/2017 18:01, Frank wrote:As per http://httpd.apache.org/docs/current/mod/core.html#allowoverride : Default: AllowOverride None (2.3.9 and later), AllowOverride All(2.3.8 and earlier) I'm not sure what your point is. I am aware of that and it supports the point I am making in my email. The default should be none, which also means .htaccess files should not be read at all, but if the default is used then .htaccess files are read. It has to be stated explicitly to prevent .htaccess files being read. Nigel --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
Nigel,The point is that the default value changed for 2.3 (and hence 2.4), and you seem to be missing it, yes.
As for why that change was made, the development mailing list might be better suited for that thread.
--------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx