Re: [users@httpd] Authentication based on QUERY STRING

2011-01-26 Thread J.Lance Wilkinson
Mark Montague wrote: If you're ignoring the "remarkably bad idea" part of Rich's response, above, here are some more ways to get in trouble: - mod_cosign allows you to make authentication optional via the CosignAllowPublicAccess directive. If you are serving dynamic content (a CGI, etc.), yo

Re: [users@httpd] Authentication based on QUERY STRING

2011-01-26 Thread Mark Montague
On January 26, 2011 13:48 , Rich Bowen wrote: On Jan 26, 2011, at 10:52 AM, J.Lance Wilkinson wrote: I have a developer who's using Apache 1.3.9 (supplied as Oracle HTTP server within Oracle Application Express) and needs to SUPPRESS his default authentication (mod_cosign from weblogin.org)

Re: [users@httpd] Authentication based on QUERY STRING

2011-01-26 Thread Rich Bowen
On Jan 26, 2011, at 1:38 PM, J.Lance Wilkinson wrote: > Rich Bowen wrote: >> On Jan 26, 2011, at 10:52 AM, J.Lance Wilkinson wrote: >>> I have a developer who's using Apache 1.3.9 (supplied as Oracle HTTP server >>> within Oracle Application Express) and needs to SUPPRESS his default >>> authen

Re: [users@httpd] Authentication based on QUERY STRING

2011-01-26 Thread J.Lance Wilkinson
Rich Bowen wrote: On Jan 26, 2011, at 10:52 AM, J.Lance Wilkinson wrote: I have a developer who's using Apache 1.3.9 (supplied as Oracle HTTP server within Oracle Application Express) and needs to SUPPRESS his default authentication (mod_cosign from weblogin.org) when the user's QUERY_STRING

Re: [users@httpd] Authentication based on QUERY STRING

2011-01-26 Thread Björn Zettergren
On 01/26/2011 06:52 PM, Rich Bowen wrote: On Jan 26, 2011, at 10:52 AM, J.Lance Wilkinson wrote: I have a developer who's using Apache 1.3.9 (supplied as Oracle HTTP server within Oracle Application Express) and needs to SUPPRESS his default authentication (mod_cosign from weblogin.org) when

Re: [users@httpd] Authentication based on QUERY STRING

2011-01-26 Thread Rich Bowen
On Jan 26, 2011, at 10:52 AM, J.Lance Wilkinson wrote: > I have a developer who's using Apache 1.3.9 (supplied as Oracle HTTP server > within Oracle Application Express) and needs to SUPPRESS his default > authentication (mod_cosign from weblogin.org) when the user's QUERY_STRING > contains th

[users@httpd] Authentication based on QUERY STRING

2011-01-26 Thread J.Lance Wilkinson
I have a developer who's using Apache 1.3.9 (supplied as Oracle HTTP server within Oracle Application Express) and needs to SUPPRESS his default authentication (mod_cosign from weblogin.org) when the user's QUERY_STRING contains the string ":25:". Otherwise he wants to continue to enforce his