Sean Davis wrote:
On 12/29/05 2:26 PM, "httpd2@xxxxxxxxxxxx" <httpd2@xxxxxxxxxxxx> wrote:Sean - I have created a directory in the public area, and added the following to my config file: <Directory /srv/www/htdocs/KAR/websites/pub/computing/apache-test> Options None Order deny,allow Deny from all <Files *.php> Order deny,allow Deny from all </Files> </Directory> (I restarted apache with /etc/init.d/apache2 stop, then start.) If you go to that directory, you will get permission denied. If you then add the following filename, get_vars.php, you will be able to access that file - well I can from localhost anyway. Is this normal behaviour. I think I may need to re-write my config files from scratch, after carefully reading the manual.I certainly don't see why that is the case. I hope someone else can answer your question so that I can learn as well.
I have a restricted directory on one of my sites and I looked at my config to see what I have listed. I also tried the same test that you did on my site. When I try to access the directory, I get a request for a logon and password (as expected). When I entered an invalid password, I gave me the Authorization Required page. I then tried to directly access a file in that directory and got exactly the same response. Lastly I verified that I was getting the filename right by entering the correct password when prompted and was able to access the file. Here is an extract of my confd file if that helps. This is obviously on a Windows based Apache.
<Directory "C:/Program Files/Apache Group/Apache2/htdocs">
AllowOverride None
Order allow,deny
Allow from all
</Directory>
#
# Allow Override for .htpasswd access to xxxFiles directory
<Directory "C:/Program Files/Apache
Group/Apache2/htdocs/K6CCC.org/xxxFiles">
AllowOverride AuthConfig </Directory>In the last Directory statement, it really is one line, but may split in the E-Mail...
-- 73 ------------------------------------- Jim Walls - K6CCC k6ccc@xxxxxxxxx Ofc: 818-548-4804 http://home.earthlink.net/~k6ccc AMSAT Member 32537 - WSWSS Member 395 --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|