Re: [cobalt-developers] AllowOverride None

[Herb Rubin <herbr@xxxxxxxxxxxx>]

Kal,

I tried this and it worked ok, so at least they could have .htaccess files
force passwords, but it still didn't allow me to use custom error pages. I
still had to edit my access.conf file!!

Herb


Kal Amry wrote:

> I strongly recommend that you put everything back as it is and just download
> this update:
>
> http://ftp.cobalt.com/pub/packages/raq4/eng/RaQ4-All-System-0.0.2-7709.pkg
>
> All Raq 4 comes with AllowOverride None, yet after you download the fix,
> then you'll have it professionally fixed by the cobalt. It should allow you
> do what you want. Just do the following:
>
> Log in as root
> cd /home/packages
> wget
> http://ftp.cobalt.com/pub/packages/raq4/eng/RaQ4-All-System-0.0.2-7709.pkg
> install the cobalt update through the interface. I also, recommend that you
> download
> all other updates. This fix up here is also included in the OS update but
> since
> you are not able to use .htaccess, I think you don't have that update.
>
> Just ftp to cobalt.com/pub/packages/raq4/eng and download everything...
>
> Kal Amry
>
> -----Original Message-----
> From: cobalt-developers-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-developers-admin@xxxxxxxxxxxxxxx]On Behalf Of malcolm
> wild
> Sent: Sunday, February 11, 2001 6:04 PM
> To: cobalt-developers@xxxxxxxxxxxxxxx
> Subject: RE: [cobalt-developers] AllowOverride None
>
> yep!
> if you did this in the section marked for
> .ht
>
> anyone with a knowledge of .htaccess overrides can enable any features of
> apache that they want, ie switch on PHP support for example.
>
> ideally you should only ALLOW the functions that a required by your
> client/service checkout apache.org for a list of all the overrides and what
> they can/can't do, you'll be surprised how much you can override with a conf
> setting of ALL!
>
> -----Original Message-----
> From: cobalt-developers-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-developers-admin@xxxxxxxxxxxxxxx]On Behalf Of Herb Rubin
> Sent: 11 February 2001 20:46
> To: cobalt-developers@xxxxxxxxxxxxxxx
> Subject: [cobalt-developers] AllowOverride None
>
> In my Raq 4, I noticed in access.conf
>
>   AllowOverride None
>
> so that disabled .htaccess files, I changed it to
>
>   AllowOverride All
>
> Is this a security hole?
>
> Herb
>
> --
> Herb Rubin
> Pathfinders Software
> herbr@xxxxxxxxxxxx
> www.pfinders.com
> phone: 415 292-4935
> fax:   415 292-4913
>
> _______________________________________________
> cobalt-developers mailing list
> cobalt-developers@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-developers
>
> _______________________________________________
> cobalt-developers mailing list
> cobalt-developers@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-developers
>
> _________________________________________________________
> Do You Yahoo!?
> Get your free @yahoo.com address at http://mail.yahoo.com
>
> _______________________________________________
> cobalt-developers mailing list
> cobalt-developers@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-developers

--
Herb Rubin
Pathfinders Software
herbr@xxxxxxxxxxxx
www.pfinders.com
phone: 415 292-4935
fax:   415 292-4913