Re: protecting php controller paths

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I just wanted to comment on one statement below :

Chris Africa wrote:
[...]
Attempts to restrict /student or /student.php with either <Directory> or <Location> are ignored (which makes sense, since these are neither directories nor locations).
They are indeed not real directories on disk, so you will not affect them using <Directory> sections. But /student is definitely a "Location" and should be affected by a <Location /student> section. A <Location> in Apache basically means "a URL". Whether it actually corresponds to something on the disk or not does not matter.
If you have a section like
<Location /student>
...
</Location>
then any directive in the "..." above *should* affect all requests for URL's starting with "/student", no matter what is behind them (PHP script or else).

I am only mentioning the above so as to avoid you going onto the wrong track and looking unnecessarly into possibly more complicated solutions.

One reason why the above does not seem to work in your case may be that you have another directive somewhere alse which overrides your <Location /student>. If possible, post your entire httpd.conf config file, it may be possible then for someone to provide more specific help.

André



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux