From 5e976e45e1bbbbbbe2d287bc06e60957f9c2dd4e Mon Sep 17 00:00:00 2001 From: Rich Bowen Date: Thu, 7 May 2026 20:27:14 +0000 Subject: [PATCH] docs: Rewrite AccessFileName and AllowOverride opening paragraphs for clarity. We should not be giving examples of configuration that is objectively a terrible idea -- removed that example. (Bug 70025) git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1933919 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/mod/core.xml | 45 +++++++++++++++++++++++++--------------- 1 file changed, 28 insertions(+), 17 deletions(-) diff --git a/docs/manual/mod/core.xml b/docs/manual/mod/core.xml index 90d5b62802..72586e1661 100644 --- a/docs/manual/mod/core.xml +++ b/docs/manual/mod/core.xml @@ -200,27 +200,38 @@ AcceptFilter https connect -

While processing a request, the server looks for - the first existing configuration file from this list of names in - every directory of the path to the document, if distributed +

The AccessFileName directive allows you to change the name of the file + that will be considered for per-directory configuration overrides, in the + event that AllowOverride is enabled + for that directory.

+ + We do not recommend that you change this value, and + especially that you do not list multiple possible file names, as it makes + troubleshooting more difficult for anyone not familiar with your local + settings. + +

While processing a request, the server looks for files with the name + (or names) defined in AccessFileName + in every directory of the path to the document, if distributed configuration files are enabled for that - directory. For example:

- - -AccessFileName .acl - - -

Before returning the document + directory. For example Before returning the document /usr/local/web/index.html, the server will read - /.acl, /usr/.acl, - /usr/local/.acl and /usr/local/web/.acl - for directives unless they have been disabled with:

+ /.htaccess, /usr/.htaccess, + /usr/local/.htaccess and /usr/local/web/.htaccess + for directives.

+ +

For this reason, the default configuration file contains the following stanza:

<Directory "/"> AllowOverride None </Directory> + +

This configuration block helps prevent unnecessary file accesses in directories + outside of your DocumentRoot. See also the note + about this in the AllowOverride directive documentation.

+
AllowOverride Configuration Files @@ -319,10 +330,10 @@ NoDecode option available in 2.3.12 and later. directory -

When the server finds an .htaccess file (as - specified by AccessFileName), - it needs to know which directives declared in that file can override - earlier configuration directives.

+

When the server finds a distributed configuration file (Usually called + .htaccess - configurable by the AccessFileName), it needs to know which directives + declared in that file can override earlier configuration directives.

Only available in <Directory> sections AllowOverride is valid only in -- 2.47.3