On 6/3/05, Bob Crandell <[EMAIL PROTECTED]> wrote: > Jeff, > > Don't assume. It's not part of apache. It's an addon. Check: > http://www.webdav.org/ >
It can also be a gaping big security hole if you don't configure it just right. Don't just blindly enable it, use the Directory or VirtualHost dirctives to confine DAV access to one particular part of the filesystem, and use the access control and auth mechanisms to lock it down for who can get in and where they can get in from. basically mod_dav enables the use of PUT and DELETE verbs for http and gives the webserver read and write access to the underlying filesystem. _______________________________________________ EUGLUG mailing list [email protected] http://www.euglug.org/mailman/listinfo/euglug
