php_flag and AllowOverrides

Collapse
This topic is closed.
X
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • runderwo@mail.win.org
    #1

    php_flag and AllowOverrides

    Is there a specific AllowOverrides directive that will allow me to use
    php_flag in .htaccess? All I can see is that AllowOverrides all will
    do the trick, but unfortunately I don't want the user to be able to
    override anything else....

    Tags: None
    • runderwo@mail.win.org
      #2
      Re: php_flag and AllowOverrides

      On Jun 6, 4:52 pm, "runde...@mail. win.org" <runde...@mail. win.org>
      wrote:
      Is there a specific AllowOverrides directive that will allow me to use
      php_flag in .htaccess? All I can see is that AllowOverrides all will
      do the trick, but unfortunately I don't want the user to be able to
      override anything else....
      Okay, AllowOverrides Options will also do the trick, but that also
      lets the user enable ExecCGI and Includes which I am specifically
      trying to avoid... I wish I could do something like AllowOverrides
      php_flag php_value, i.e. on a single variable basis instead of the
      predefined groups.

        Comment

        • Erwin Moller
          #3
          Re: php_flag and AllowOverrides

          runderwo@mail.w in.org wrote:
          On Jun 6, 4:52 pm, "runde...@mail. win.org" <runde...@mail. win.org>
          wrote:
          >Is there a specific AllowOverrides directive that will allow me to use
          >php_flag in .htaccess? All I can see is that AllowOverrides all will
          >do the trick, but unfortunately I don't want the user to be able to
          >override anything else....
          >
          Okay, AllowOverrides Options will also do the trick, but that also
          lets the user enable ExecCGI and Includes which I am specifically
          trying to avoid... I wish I could do something like AllowOverrides
          php_flag php_value, i.e. on a single variable basis instead of the
          predefined groups.
          Hi,

          I have been looking for the same, but didn't find it.
          Stuck with 'Options' too.

          I made the missery a little less by only using AllowOverrides Options for 1
          virtual host in apache, but still...

          If you find a better solution, please let me/us know.

          Regards,
          Erwin Moller

            Comment

            • Schraalhans Keukenmeester
              #4
              Re: php_flag and AllowOverrides

              At Wed, 06 Jun 2007 22:18:39 +0000, runderwo@mail.w in.org let h(is|er)
              monkeys type:
              On Jun 6, 4:52 pm, "runde...@mail. win.org" <runde...@mail. win.org>
              wrote:
              >Is there a specific AllowOverrides directive that will allow me to use
              >php_flag in .htaccess? All I can see is that AllowOverrides all will
              >do the trick, but unfortunately I don't want the user to be able to
              >override anything else....
              >
              Okay, AllowOverrides Options will also do the trick, but that also
              lets the user enable ExecCGI and Includes
              Not necessarily. http://httpd.apache.org/docs/2.0/mod/core.html#options

              --
              Schraalhans Keukenmeester - schraalhans@the .Spamtrapexampl e.nl
              [Remove the lowercase part of Spamtrap to send me a message]

              "strcmp('apples ','oranges') < 0"

                Comment

                • runderwo@mail.win.org
                  #5
                  Re: php_flag and AllowOverrides

                  On Jun 8, 1:27 am, Schraalhans Keukenmeester
                  <Schraalh...@th e.spamtrapexamp le.nlwrote:
                  At Wed, 06 Jun 2007 22:18:39 +0000, runde...@mail.w in.org let h(is|er)
                  monkeys type:
                  >
                  Okay, AllowOverrides Options will also do the trick, but that also
                  lets the user enable ExecCGI and Includes
                  >
                  Not necessarily.http://httpd.apache.org/docs/2.0/mod/core.html#options
                  I guess I don't see how the link contradicts my statement. If
                  AllowOverrides Options is in effect, the user can stick Options
                  +ExecCGI +Includes in his .htaccess, which I don't want, because those
                  would allow him to execute code with web server's privilege -- no help
                  from suexec there.

                    Comment

                    • Schraalhans Keukenmeester
                      #6
                      Re: php_flag and AllowOverrides

                      At Fri, 08 Jun 2007 12:27:01 +0000, runderwo@mail.w in.org let h(is|er)
                      monkeys type:
                      On Jun 8, 1:27 am, Schraalhans Keukenmeester
                      <Schraalh...@th e.spamtrapexamp le.nlwrote:
                      >At Wed, 06 Jun 2007 22:18:39 +0000, runde...@mail.w in.org let h(is|er)
                      >monkeys type:
                      >>
                      Okay, AllowOverrides Options will also do the trick, but that also
                      lets the user enable ExecCGI and Includes
                      >>
                      >Not necessarily.http://httpd.apache.org/docs/2.0/mod/core.html#options
                      >
                      I guess I don't see how the link contradicts my statement. If
                      AllowOverrides Options is in effect, the user can stick Options
                      +ExecCGI +Includes in his .htaccess, which I don't want, because those
                      would allow him to execute code with web server's privilege -- no help
                      from suexec there.
                      You're right, my bad, for a moment I thought the (dis-)allowed sub-options
                      could be specified in the AllowOverride clause. Which isn't the case, of
                      course. My bad.

                      Sh.

                      --
                      Schraalhans Keukenmeester - schraalhans@the .Spamtrapexampl e.nl
                      [Remove the lowercase part of Spamtrap to send me a message]

                      "strcmp('apples ','oranges') < 0"

                        Comment

                        Previous template Next
                        Working...