Re: [cobalt-users] Re: RewriteEngine not allowed here .htaccess

[Larry Smith <lesmith@xxxxxxxxx>]

INRE [cobalt-users] Re: RewriteEngine not allowed here .htaccess:
> access.conf file needs this added so the RewriteEngine has permission to
> work in the virtual servers you give permission to here.
>
> <Directory /home/sites/siteXX>
> AllowOverride All
> Options All
> </Directory>

  Maybe it is just me, but this reminds me of the comment "the operation was 
a success, but the patient died......

  Possibly you are un-aware that overide all and options all means that 
anyone who has access to a web site where this is done, can now use 
"symbolic" links to point to anything in your system and display it on their 
web ???  Or even add server-side includes to display the password file and 
such ???

  Just curious.....

Larry Smith
SysAd ECSIS.NET
sysad@xxxxxxxxx