On Sonntag, 1. Januar 2006 21:31 suse@karsites.net wrote:
I'm having a problem with the <Files> directive under SuSE 9.2 pro. ... Using the following in my httpd.conf file:
Options None Order deny,allow Deny from all Order deny,allow Deny from all </Files> </Directory>
This should hide the directory apache-test/ in the directory listing of computing/, deny access to computing/apache-test/ for anyone and additionally somewhat superfluous deny access for anyone to *.php files within computing/apache-test/ That's also exactly what happens on my server with that config.
If you go to that directory, you will get permission denied for the directory, which is not even listed in the /pub/computing/ directory, as expected. It's ok you don't even see apache-test/ cause it's declared taboo by the configuration.
If you then add the following filename, get_vars.php, you will be able to access that file, as well as me from localhost. That's really astonishing, this should not work with that config and also doesn't on my server.
I assume most probably you have an additional directive somewhere that interferes with the above one or you might have mixed up different config files, startup scripts, posted a cutout of the wrong file or so... Otherwise this could be a serious bug. First you should check this with a new, very minimalistic httpd.conf that you expand step by step with single directives of the current conf up to the point where this strange behaviour appears. Hope this helps a bit, Joe
Here is the URL:
http://www.karsites.net/KAR/websites/pub/computing/apache-test/get_va rs. php
And the log entries are:
For an unsuccessfull request using: http://www.karsites.net/KAR/websites/pub/computing/apache-test/
127.0.0.1 - - [29/Dec/2005:20:48:26 +0000] "GET /KAR/websites/pub/computing/apache-test/ HTTP/1.1" 403 350
For a successfull request using: http://www.karsites.net/KAR/websites/pub/computing/apache-test/get_va rs.php
127.0.0.1 - - [29/Dec/2005:20:50:14 +0000] "GET /KAR/websites/pub/computing/apache-test/get_vars.php HTTP/1.1" 200 1721
Any ideas as to why this is happening please?
Regards - Keith Roberts