You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by pch0317 <pc...@gmail.com> on 2014/03/25 22:48:29 UTC

[users@httpd] Permission with Location

Hi List,

Goal:only user from 192.168.20.0/24 should access 
"www.example.com/?q=User" URL. Other user shouldn't access this location.

Issue:When I configure virtual host with "Location" statement:

<VirtualHost ....>
ServerName www.example.com
...
<Location /?q=User>
   Order allow,deny
   Allow from 192.168.20.0/24
</Location>
</VirtualHost>

user from 192.168.0.0/24 can open www.example.com/?q=User. Why?

Best regards,
pch

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Permission with Location

Posted by "Paweł Ch." <pc...@gmail.com>.
It don't work :-(


On 25 March 2014 22:53, Paul Singleton <pa...@gmail.com> wrote:

> <VirtualHost ....>
> ServerName www.example.com
> ...
> <Location /?q=User>
>  Order Deny,Allow
>
>   Deny from all
>
>  Allow from 192.168.20.0/24
> </Location>
> </VirtualHost>
>
>
> Try that
> On Mar 25, 2014, at 2:48 PM, pch0317 <pc...@gmail.com> wrote:
>
> Hi List,
>
> Goal:only user from 192.168.20.0/24 should access "www.example.com/?q=User"
> URL. Other user shouldn't access this location.
>
> Issue:When I configure virtual host with "Location" statement:
>
> <VirtualHost ....>
> ServerName www.example.com
> ...
> <Location /?q=User>
>  Order allow,deny
>  Allow from 192.168.20.0/24
> </Location>
> </VirtualHost>
>
> user from 192.168.0.0/24 can open www.example.com/?q=User. Why?
>
> Best regards,
> pch
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
>
>
> Paul Singleton
> paolojs@gmail.com
>
>
>
>
>

Re: [users@httpd] Permission with Location

Posted by Paul Singleton <pa...@gmail.com>.
> <VirtualHost ....>
> ServerName www.example.com
> ...
> <Location /?q=User>
>  Order Deny,Allow
  Deny from all
>  Allow from 192.168.20.0/24
> </Location>
> </VirtualHost>

Try that
On Mar 25, 2014, at 2:48 PM, pch0317 <pc...@gmail.com> wrote:

> Hi List,
> 
> Goal:only user from 192.168.20.0/24 should access "www.example.com/?q=User" URL. Other user shouldn't access this location.
> 
> Issue:When I configure virtual host with "Location" statement:
> 
> <VirtualHost ....>
> ServerName www.example.com
> ...
> <Location /?q=User>
>  Order allow,deny
>  Allow from 192.168.20.0/24
> </Location>
> </VirtualHost>
> 
> user from 192.168.0.0/24 can open www.example.com/?q=User. Why?
> 
> Best regards,
> pch
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 



Paul Singleton
paolojs@gmail.com





Re: [users@httpd] Permission with Location

Posted by Eric Covener <co...@gmail.com>.
On Wed, Mar 26, 2014 at 8:35 AM, Paweł Ch. <pc...@gmail.com> wrote:
>> > <Location /?q=User>
>> Location only matches against the path component, not the query string.
>>
>> if you're in 2.4, check out <if>. In 2.2, use mod_rewrite with a
>> RewriteCond.
> Is some other solution to allow access only form 192.168.20.0/24?

There probably are, what's wrong with <if> or mod_rewrite?

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Permission with Location

Posted by "Paweł Ch." <pc...@gmail.com>.
Is some other solution to allow access only form 192.168.20.0/24?


On 25 March 2014 23:15, Eric Covener <co...@gmail.com> wrote:

> > <Location /?q=User>
> Location only matches against the path component, not the query string.
>
> if you're in 2.4, check out <if>. In 2.2, use mod_rewrite with a
> RewriteCond.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

Re: [users@httpd] Permission with Location

Posted by Eric Covener <co...@gmail.com>.
> <Location /?q=User>
Location only matches against the path component, not the query string.

if you're in 2.4, check out <if>. In 2.2, use mod_rewrite with a RewriteCond.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org