Re: disabling php ability via .htaccess
| From: | php3 at developersdesk dot com | Date: | Tue, 30 Jan 2001 10:17:57 +0000 |
| Subject: | Re: disabling php ability via .htaccess | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-37277@lists.php.net to get a copy of this message | ||
Addressed to: "Martin Pitt" <martinp@enta.net>
php-general@lists.php.net
** Reply to note from "Martin Pitt" <martinp@enta.net> Tue, 30 Jan 2001 10:05:41
-0000
>
> Hiya,
>
> Ok this is going to a little weird, however I can assure you there is
> a reason for it.
>
> Basically does anyone how to disabled .php scripts within directories
> by using a .htaccess file.
>
> Basically the whole server (Apache with Linux and PHP 4.0.4) is PHP
> enabled, but we don't want certain users to run .php scripts in
> certain directories until we allow them to, and remove the file.
>
> How can this be done via method stated above, or is there another way
> of going about this.
Look for engine in this document:
http://www.php.net/manual/en/configuration.php
It does work in .htaccess, as long as overrides are allowed in
httpd.conf. Your big problem will be how to keep them from
changing or removing the .htaccess file in a directory they can write
to. Remember, if I can write to a directory, I can rm files from it,
even if I don't own them.
Rick Widmer
Internet Marketing Specialists
http://www.developersdesk.com