|
Posted by Big Bill on May 24, 2008, 6:09 am
Please log in for more thread options On Sat, 24 May 2008 08:28:17 +0000, Guy Macon
<http://www.guymacon.com/> wrote:
>
>
>
>Big Bill wrote:
>>
>>I found this on a site I'm considering...
>>
>><Files 403.shtml>
>>order allow,deny
>>allow from all
>></Files>
>>
>>what is it likely to be doing, do we think?
>>It has dubious provenance so it may be crap.
>
>It is invoking the apache module mod_access to control access
>to a particular file.
>
>> <Files 403.shtml>
>
>This says "apply everything between this and </Files>
>to one file named 403.shtml. From the filename I am
>guessing it is the file that is served up with an
>error 403
>See http://httpd.apache.org/docs/1.3/mod/core.html#files
>
>> order allow,deny
>
>This sets the order in which the directives that follow are
>applied. First, all Allow directives are evaluated at least
>one (in this case there is only one; see next line) must
>match or access to the file is denied. Next, all Deny
>directives are evaluated. if one or more matches (this won't
>happen in this case, because there are no Deny directives)
>access to the file is denied. Finally, anything that does
>not match an Allow or a Deny directive has access denied by
>default.
>See http://httpd.apache.org/docs/1.3/mod/mod_access.html#order
>
>> allow from all
>
>This says that the Allow directive matches any domain and any
>IP address
>See http://httpd.apache.org/docs/1.3/mod/mod_access.html#allow
>
>> </Files>
>
>End of invoking the apache module mod_access.
>
>So what the whole thing is saying is "allow anyone to access the
>file named 403.shtml"
>
>403 is the HTTP status for "Forbidden", meaning that the client
>was able to communicate with the server, but the server is refusing
>access to whatever was requested. So if the server denies all
>access to. say, a particular IP address, this should see an exeption
>for the one error file that is served up along with the error.
>
>I would have to test to make sure that this really does have
>priority over the blocking directive. It may be important
>which comes first.
I have no idea what you said just then. What's that mean in English
please Guy, why would you have something like that in there? You have
to remember that, going by other things, the guy who set this up seems
to have had little idea of what he was doing...
or it could be me misunderstanding it all!
BB
--
http://www.kruse.co.uk/ http://www.fat-odin.com/ http://www.here-be-posters.co.uk/
|