You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Robert Dahlem <Ro...@siemens.com> on 2002/07/01 12:27:13 UTC
RE: Is "AllowOverride Options" dangerous?
Hi,
On Fri, 28 Jun 2002 16:15:04 +0200, Boyle Owen wrote:
>The original question was how to prevent users from switching on CGI
>execution by putting something like:
> Options +ExecCGI
> AddHandler cgi-script .cgi
>into a .htaccess file (assuming you had already allowed .htaccess with
>an "AllowOverride Options" in the server config).
>Despite what the documentation states, it appears that you can't use
>"AddHandler" in a .htaccess (I get "AddHandler not allowed here").
That's it! Thank you for pointing this out.
Regards,
Robert
--
Robert.Dahlem@siemens.com
Siemens Business Services - FS GF KORDOBA-Outsourcing
Tel: +49-69-797-6530 Fax: +49-69-797-6599
----------------------------------------------------------------------
Sent using PMMail (http://www.pmmail2000.com) - fast, decent, email
software; far better than Outlook. Try it sometime.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: Is "AllowOverride Options" dangerous?
Posted by Rodent of Unusual Size <Ke...@Golux.Com>.
Robert Dahlem wrote:
>
> On Fri, 28 Jun 2002 16:15:04 +0200, Boyle Owen wrote:
> >
> >Despite what the documentation states, it appears that you can't use
> >"AddHandler" in a .htaccess (I get "AddHandler not allowed here").
>
> That's it! Thank you for pointing this out.
What version of Apache is this again? That's a bug..
--
#ken P-)}
Ken Coar, Sanagendamgagwedweinini http://Golux.Com/coar/
Author, developer, opinionist http://Apache-Server.Com/
"Millennium hand and shrimp!"
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org