>Number: 294 >Category: general >Synopsis: htaccess searched for in weird places >Confidential: no >Severity: serious >Priority: medium >Responsible: apache (Apache HTTP Project) >State: open >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Tue Apr 1 06:10:01 1997 >Originator: [EMAIL PROTECTED] >Organization: apache >Release: 1.2b7 >Environment: SunOS k 5.5 Generic_103093-08 sun4m sparc SUNW,SPARCclassic gcc 2.7.2 >Description: If a directory has a Location directive for it in access conf (perhaps even without it), .htaccess will be searched starting from the root directory upward toward apache's directory. With a Directory directive, the correct thing happens. Using truss, I could see that the httpd was looking for .htaccess as follows: /.htaccess, /opt/.htaccess, /opt/local/.htaccess and /opt/local/apache/.htaccess While I might've been doing the Wrong Thing with Location, I still don't think the server should attempt to poke at files in /. >How-To-Repeat: Create a directory under htdocs, put in a Location directive for it, attempt to use .htaccess in at directory, truss the server, see it dtwt. >Fix: N >Audit-Trail: >Unformatted:
