Join Log in
Score:1
user191429 avatar Server

Apache: not working (in .htaccess)

zm flag
user191429

I am trying to set some controls in Apache via the .htaccess. This works:

<LimitExcept GET>
    Order allow,deny
    Allow from all
    Deny from all
</LimitExcept>

while this does not:

<LimitExcept POST>
    Order allow,deny
    Allow from all
    Deny from all
</LimitExcept>

Please help me understand what is going on here.

Example test case:

I created a simple HTML form (form.html) to test things out:

<form method="post" action="./test/index.html">
<input type="submit" name="submit" value="submit" />
</form>

Along it, I created a subfolder "test" with two files:

  • index.html (<p>Hello world</p>)
  • .htaccess (with contents exactly as one of the code blocks above)

In case of the first version of the .htaccess file, submitting the HTML form produces a 403 error, while direct access (entering the full address in a browser - e.g. /test/index.html) is not blocked. This is as expected. However, in case of the second version of the .htaccess file, both submitting the HTML form AND direct access result in a 403 error.

I do not think this is a bug (tested in Apache 2.2 and 2.4), but knowing that other people can replicate it would be quite helpful. Of course, ultimately I would like to understand why things are not working as intended.

71
0 + 0
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.