Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-19 Thread Sheryl
Hi Sheryl, > > Thanks for your reply. > > I'm not sure how can I give users a better solution as they need .htaccess > files on their webroot. Sorry about the delay in replying. I didn't have time to read the list last week. As I think I said, it all depends upon the circumstances. If you're d

Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-11 Thread James Corteciano
Hi Sheryl, Thanks for your reply. I'm not sure how can I give users a better solution as they need .htaccess files on their webroot. Regards, James On Thu, Jul 8, 2010 at 11:42 PM, Sheryl wrote: > > Hi All, > > > > I would like to hear your idea's of what are the pros and cons if I will > > s

Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-08 Thread Sheryl
> Hi All, > > I would like to hear your idea's of what are the pros and cons if I will > set > a specific directive-type for AllowOverride like AuthConfig, > FileInfo,Indexes, Limit, and Options? Most security guidelines say no to Indexes. It's tolerable to do allow overrides an most things for a

Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-08 Thread James Corteciano
Hi Scott, That helps. Thanks. James On Thu, Jul 8, 2010 at 2:40 PM, Scott Gifford wrote: > On Thu, Jul 8, 2010 at 2:28 AM, James Corteciano > wrote: > [ ... ] > >> I am just concern about security matters that will produce if I will give >> the user full access on .htaccess (AllowOverride All)

Re: [us...@httpd] AllowOverride: Pros and Cons

2010-07-07 Thread Scott Gifford
On Thu, Jul 8, 2010 at 2:28 AM, James Corteciano wrote: [ ... ] > I am just concern about security matters that will produce if I will give > the user full access on .htaccess (AllowOverride All) on their webroot? > AllowOverride All effectively allows a user who can create a .htaccess file to ac

[us...@httpd] AllowOverride: Pros and Cons

2010-07-07 Thread James Corteciano
Hi All, I would like to hear your idea's of what are the pros and cons if I will set a specific directive-type for AllowOverride like AuthConfig, FileInfo,Indexes, Limit, and Options? I am just concern about security matters that will produce if I will give the user full access on .htaccess (Allo

Re: [us...@httpd] AllowOverride

2009-11-10 Thread Ghislain Pruniaux
Next time i will open my eyes Thanks a lot On 11/10/2009 05:13 PM, Eric Covener wrote: On Tue, Nov 10, 2009 at 11:04 AM, Pruniaux Ghislain wrote: Hi, Some users on my apache server need to use RewriteEngine in there directory. They use .htaccess, but they say that does not work. I think i m

Re: [us...@httpd] AllowOverride

2009-11-10 Thread Eric Covener
On Tue, Nov 10, 2009 at 11:04 AM, Pruniaux Ghislain wrote: > Hi, > Some users on my apache server need to use RewriteEngine in there directory. > They use .htaccess, but they say that does not work. > I think i must change AllowOverride for their directory (default is none) , > but i could not fin

[us...@httpd] AllowOverride

2009-11-10 Thread Pruniaux Ghislain
Hi, Some users on my apache server need to use RewriteEngine in there directory. They use .htaccess, but they say that does not work. I think i must change AllowOverride for their directory (default is none) , but i could not find the AllowOverride directive for the RewriteEngine (AuthConfig,Fi

Re: [us...@httpd] AllowOverride

2009-10-22 Thread Rich Bowen
On Oct 21, 2009, at 22:42 , Rajwinder-office Singh wrote: Hi, Currently if i "do not" allow a directive in "AllowOverride" then apache throws "500 internal server error". Which i am not comfortable with as, If you a r telling apache to owner only certain directives in htaccess then putt

[us...@httpd] AllowOverride

2009-10-21 Thread Rajwinder-office Singh
Hi, Currently if i "do not" allow a directive in "AllowOverride" then apache throws "500 internal server error". Which i am not comfortable with as, If you a r telling apache to owner only certain directives in htaccess then putting a "not allowed" directive actually brings website down.( which i

[us...@httpd] AllowOverride for rewrite configurations only

2009-09-23 Thread Luis Fernando
Hello, I've been googling this issue and i couldn't find an answer yet. I read the documentation of AllowOverride directive but it didn't help too... I work on an ISP and we want to allow our customers to override only rewrite configurations via .htaccess files. Nowadays a lot of applicatio