Re: [EMAIL PROTECTED] protecting php controller paths

2008-08-14 Thread André Warnier
I just wanted to comment on one statement below : Chris Africa wrote: [...] Attempts to restrict /student or /student.php with either or are ignored (which makes sense, since these are neither directories nor locations). They are indeed not real directories on disk, so you will not affect t

[EMAIL PROTECTED] protecting php controller paths

2008-08-14 Thread Chris Africa
We are using an MVC framework to develop PHP applications. We have Apache handling requests via the PHP module, Cosign for authentication, and .htaccess for authorization. Up to a few months ago, we developed/deployed our applications with Zope, which handled both authentication and authori