From fc561db10644a51486df0f2ba8373c24bcff6854 Mon Sep 17 00:00:00 2001
From: Joshua Slive To run a really tight ship, you'll want to stop users from
setting up .htaccess
files which can override
security features you've configured. Here's one way to do
- it...
In the server configuration file, put
<Directory />
AllowOverride None
- Options None
- Allow from all
</Directory>
Then setup for specific directories
- This stops all overrides, Includes and accesses in all - directories apart from those named.
+This prevents the use of .htaccess
files in all
+ directories apart from those specifically enabled.