Hi,

What I am looking to do is disable all METHODS with the exception of
GET, POST and HEAD.

In apache 1.3.29, the following worked when placed in httpd.conf:

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_METHOD} !^(GET|HEAD|POST)$
RewriteRule .* - [F]
</IfModule>

Now that I am running apache2.0.48, all the methods are still being
allowed when I incorporate this fix.  Is there something else that can
be done in apache2 to disallow these METHODS?

Thanks,
D

Sign up today for your Free E-mail at: http://www.canoe.ca/CanoeMail

Reply via email to