Re: .htacess security

2000-08-15 Thread Doug MacEachern
On Thu, 3 Aug 2000, Rob Giseburt wrote: > Are .htaccess files secure? I don't want users to be able to use > ... sections or any other mod_perl constructs (setting scripts > to run via the Registry, for example) in .htaccess files. However, I need > .htaccess files turned on so users can passwo

Re: .htacess security

2000-08-04 Thread Dan Rench
On Thu, 3 Aug 2000, Ken Williams wrote: > [EMAIL PROTECTED] (Rob Giseburt) wrote: > >Are .htaccess files secure? I don't want users to be able to use > >... sections or any other mod_perl constructs (setting scripts > >to run via the Registry, for example) in .htaccess files. However, I need >

Re: .htacess security

2000-08-03 Thread Ken Williams
[EMAIL PROTECTED] (Rob Giseburt) wrote: >Are .htaccess files secure? I don't want users to be able to use >... sections or any other mod_perl constructs (setting scripts >to run via the Registry, for example) in .htaccess files. However, I need >..htaccess files turned on so users can password p

Re: .htacess security

2000-08-03 Thread Rob Giseburt
On 8/3/2000 9:54 AM, Erich L. Markert at [EMAIL PROTECTED] wrote: > Damn good question... > > I know the default apache config has a rule that prevents .htaccess > files from being accessed via a URL but not from within an embedded. > > One way around this would be to use a database to handle a

.htacess security

2000-08-03 Thread Rob Giseburt
Are .htaccess files secure? I don't want users to be able to use ... sections or any other mod_perl constructs (setting scripts to run via the Registry, for example) in .htaccess files. However, I need .htaccess files turned on so users can password protect directories site-wide (so I can't shut