From: Rich Bowen
Date: Sat, 9 Aug 2008 20:12:31 +0000 (+0000)
Subject: Admonish people not to put "AllowOverride All" in and
X-Git-Tag: 2.3.0~386
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=60a8f3bd423f65d362708d00eafe6a0d025e386f;p=thirdparty%2Fapache%2Fhttpd.git
Admonish people not to put "AllowOverride All" in and
expect it to do anything useful.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@684326 13f79535-47bb-0310-9956-ffa450edef68
---
diff --git a/docs/manual/mod/core.html.en b/docs/manual/mod/core.html.en
index 7d7ebac6783..30074fe4950 100644
--- a/docs/manual/mod/core.html.en
+++ b/docs/manual/mod/core.html.en
@@ -500,6 +500,14 @@ be passed through
AuthConfig
nor Indexes
cause an internal
server error.
+ For security and performance reasons, do not set
+ AllowOverride
to anything other than None
+ in your <Directory />
block. Instead, find (or
+ create) the <Directory>
block that refers to the
+ directory where you're actually planning to place a
+ .htaccess
file.
+
+
See also
AccessFileName
diff --git a/docs/manual/mod/core.xml b/docs/manual/mod/core.xml
index b6e351e2c80..fa2975257cf 100644
--- a/docs/manual/mod/core.xml
+++ b/docs/manual/mod/core.xml
@@ -461,6 +461,14 @@ be passed through
In the example above all directives that are neither in the group
AuthConfig
nor Indexes
cause an internal
server error.
+
+ For security and performance reasons, do not set
+ AllowOverride
to anything other than None
+ in your <Directory />
block. Instead, find (or
+ create) the <Directory>
block that refers to the
+ directory where you're actually planning to place a
+ .htaccess
file.
+
AccessFileName