https://issues.apache.org/bugzilla/show_bug.cgi?id=55990

--- Comment #4 from Dan Jacobson <jida...@jidanni.org> ---
These are my results. Please test with these *exact* lines.
No need to look at the parent, just attempt to browse the directory itself.
With a .htaccess of

Order Deny,Allow
Deny from all
Allow from env=!let_me_in

I can access its directory.

Now even putting "SetEnv let_me_in 1" at the BOTTOM of the file,

Order Deny,Allow
Deny from all
Allow from env=!let_me_in
SetEnv let_me_in 1

results in 403 Forbidden.

**That proves in some cases, the SetEnv IS processed.**

However not if we reverse the test, no matter how much we use it,

SetEnv set_me_in 1
Order Deny,Allow
Deny from all
Allow from env=let_me_in
SetEnv let_me_in 1

as we already know.

(Today testing with Apache 2.2.3.)

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscr...@httpd.apache.org
For additional commands, e-mail: docs-h...@httpd.apache.org

Reply via email to