On Mon, Jan 22, 2001 at 10:23:39AM +0100, David Heremans wrote:
> On Monday 22 January 2001 10:37, you wrote:
> 
> > The file to specify a mimetype for an extension on Apache, can that file be
> > created by any user or is it system wide? If the latter is true, people
> > will have to ask system administration to make the changes and they may be
> > reluctant to do so.
> 
> In true Unix tradition. Both, one could configure appache to read a users 
> configuration for the mime types, however 99.99% of the installations of one 
> mime-type file which is system-wide. This kind of stuff is something you 
> would like to keep under strict controll by the sysadmin. Otherwise all kind 
> of (mis/ab)use could be made of it.

This is the default installation, and all installations I've seen allow you
to change/add mime-types through .htaccess files and the ``AddType''
command. All sites I've had access to using Apache allowed this, including
user-homepages at isps.
 
How can changing the mime-type be misused/abused? Quite often it is necessary,
like when you Apache doesn't know about .png or .rm files.

> Not to mention all the extra overhead one would introduce in the systems to 
> parse the mimetype-list for each request of a user-page.

IIRC Apache caches .htaccess files, based on the time-stamp of the file. I
can remember something like that in the source but I'm not sure.

This is all standard behaviour. 

Try downloading:

        http://www.msxnet.org/penguin.msx


Sean

--
For info, see http://www.stack.nl/~wynke/MSX/listinfo.html

Reply via email to