On Thu, 7 Oct 2004, Davide Marzaloni wrote:

My problem is not replacing the error page (obviously editing the HTML
code), but build a customized error page, giving the user the chance to
'bypass' the controll, clicking on a link, containing the original URL
requested.

For the redirect part see the deny_info directive.

But I do not have any good answer on how to provide the bypass function. What I have done in similar situations is to require authentication to be able to browse restricted sites (assuming authentication is not normally required to be able to browse), with a suitable deny_info page describing why access was denied, shown if the authentication is cancelled.

Using a redirector may be possible, but will quite likely break many sites as it will only work for sites using relative URLs, and you also risk other users finding out about this feature of your redirector unless you carefully design proper access controls.

Regards
Henrik

Reply via email to