Emmanuel E wrote: > Hi, > > Is there any way to disable PUT DELETE and TRACE methods on Apache? User > authentication is one way but then it still allows authenticated users to > use those methods. Untested: RewriteCond %{REQUEST_METHOD} (PUT|DELETE|TRACE) RewriteRule (.*) - [F] Joost --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx