Re: [users@httpd] Quick and dirty way to block "cfm" and "cfc" file requests?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 23 Mar 2005 10:53:50 -0500, Jon Block <jon@xxxxxxxxxxxxxxxxxxxx> wrote:
> I'm trying to say "For this one specific virtual host, block any requests to
> cfm and cfc files.
> 
> One thing to point out: the directory index order is set to "index.cfm,
> index.html". That means that if a request comes into www.example.com and the
> webserver tries to serve out index.html, that's okay. If it tries to serve
> out index.cfm, it should fail.
> 
> I was thinking this would be the way to do it:

>  <LocationMatch .*\.(cfm|cfc)>
>   order deny,allow
>   deny from all
>  </LocationMatch>

LocationMatch will match on the actual URL used in the request.  In a
request for a directroy, this is simply "/".  What you want is
<Files \.(cfm|cfc)$>
Order deny,allow
Deny from all
</Files>

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux