Re: [cobalt-users] .htaccess and cgi-wrap

[flash22@xxxxxxx]

On Sun, 17 Dec 2000, Adam Holt wrote:

> Hello again,
> I have another newbie question coming your way.
> 
> So, why now shouldn't I turn off cgi-wrap, since a user can do it anyway
> using a .htaccess file.

 chown admin .htaccess
 chmod 444 .htaccess

Now the user cant change a thing ;0

(you also have to add a line in the file to disabe .htaccess in lower
subdirectories Options -Inherit i think..)

The main reason for allowing changes like this is so you don't have to 
fiddle with the server wide config to make site changes in enviroments
where you have controll of all aspects of the server, it's very handy in
this case, but as you saym when you don't have fully trusted users it's
probably not good to allow full access to these settings...