RE: htaccess

by "Brian A. Sayrs" <sayrs(at)southwindsolutions.com>

 Date:  Wed, 8 Mar 2000 09:16:14 -0800
 To:  "'Mitzi Nakatsuka'" <m-nakatsuka(at)uchicago.edu>,
"roger(at)isgwds.enterprise-plc.com" <roger(at)isgwds.enterprise-plc.com>,
"hwg-techniques(at)hwg.org" <hwg-techniques(at)hwg.org>
  todo: View Thread, Original
O O P S

That's what I get for cutting and pasting too quickly!  You, of course,  have it correct, Mitzi!

Brian

-----Original Message-----
From:	Mitzi  Nakatsuka [SMTP:m-nakatsuka(at)uchicago.edu]
Sent:	Wednesday, March 08, 2000 8:59 AM
To:	sayrs(at)southwindsolutions.com; roger(at)isgwds.enterprise-plc.com; hwg-techniques(at)hwg.org
Subject:	htaccess

I thought the usual procedure was deny first, then allow.
Below you have
order deny, allow
allow from .ac.uk

Shouldn't it be
order deny, allow
deny all
allow from .ac.uk  ??

--Mitzi

 >From: "Brian A. Sayrs" <sayrs(at)southwindsolutions.com>
 >To: "'Roger Stenning'" <roger(at)isgwds.enterprise-plc.com>,
 >         "hwg-techniques(at)hwg.org" <hwg-techniques(at)hwg.org>
 >Subject: RE: .htaccess problems
 >Date: Wed, 8 Mar 2000 07:19:41 -0800
 >Sender: owner-hwg-techniques(at)hwg.org
 >
 >Another thing...a general warning has been issued by Apache that if you're
 >just going to limit all actions, just eliminate all <limit> tags.  As it
 >is, you are allowing the PUT transaction when you only list GET and
 >POST.  I believe all you need is:
 >
 >order deny,allow
 >allow from .ac.uk
 >
 >Brian A. Sayrs
 >Owner, Southwind Solutions

Mitzi Nakatsuka
Web Services, NSIT
The University of Chicago

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA

This page is part of a preserved archive of archives.hwg.org. The site is no longer active and its content is not maintained. For enquiries about this archive, write to archive(at)iwanet.org.