You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Graham Leggett <mi...@sharp.fm> on 2007/09/02 14:22:14 UTC

Re: svn commit: r571927 - /httpd/httpd/trunk/docs/manual/mod/mod_include.xml

rpluem@apache.org wrote:

> URL: http://svn.apache.org/viewvc?rev=571927&view=rev
> Log:
> * There is no context location. But this directive should in .htaccess files.

I used OR_LIMIT, which I understand to be in directory and location 
sections only.

The thinking was that the administrator might not want people uploading 
content that was able to test URL access on the server, though it's up 
to debate as to whether this is just being overly paranoid?

Regards,
Graham
--

Re: svn commit: r571927 - /httpd/httpd/trunk/docs/manual/mod/mod_include.xml

Posted by Graham Leggett <mi...@sharp.fm>.
Ruediger Pluem wrote:

> From include/http_config.h:
> 
> #define OR_LIMIT 1»·     /**< *.conf inside <Directory> or <Location>
> »···»···»···»···and .htaccess when AllowOverride Limit */

Ok this makes sense - the directive is still under the administrator's 
control, so this works.

Regards,
Graham
--


Re: svn commit: r571927 - /httpd/httpd/trunk/docs/manual/mod/mod_include.xml

Posted by Ruediger Pluem <rp...@apache.org>.

On 09/02/2007 02:22 PM, Graham Leggett wrote:
> rpluem@apache.org wrote:
> 
>> URL: http://svn.apache.org/viewvc?rev=571927&view=rev
>> Log:
>> * There is no context location. But this directive should in .htaccess
>> files.
> 
> I used OR_LIMIT, which I understand to be in directory and location
> sections only.

>From include/http_config.h:

#define OR_LIMIT 1»·     /**< *.conf inside <Directory> or <Location>
»···»···»···»···and .htaccess when AllowOverride Limit */


> 
> The thinking was that the administrator might not want people uploading
> content that was able to test URL access on the server, though it's up
> to debate as to whether this is just being overly paranoid?

Deny from / Allow from / Order is also OR_LIMIT, but AFAIK it can be used
in .htaccess if AllowOverride Limit is set.
I think you might have been looking for ACCESS_CONF in this case (see
ModMimeUsePathInfo).

Regards

Rüdiger