Apache Friends Support Forum

[XAMPP 1.6.1 for linux]

The file /opt/lampp/htdocs/xampp/sqlite/.htaccess contains:

Code: Select all

# nobody should be able to access this directory by http (oswald, 31oct03)
AuthName "impossible"
AuthType Basic
require valid-user

That .htaccess file does not prevent access to the directory. I suggest changing it to:

Code: Select all

# This folder does not require access over HTTP
# (the following directive denies access by default)
Order allow,deny


I just noticed the XAMPP bug tracker, and reposted there: http://bugs.xampp.org/view.php?id=37

Is the bug tracker still the preferred place to post stuff like this?

Hi Dave,

if you actually want to restrict access the "Order" should always be "deny, allow".
Yes the bug tracker is the prefered way for bug reporting.

Thanks

Thanks. I've never fully understood the Order directive. I copied that example from /opt/lampp/phpmyadmin/libraries/.htaccess.

I've also used "Deny from all" without an Order directive, and it seems to work too.

Dave_L wrote:Order allow,deny

That's also correct.

A "Order Allow,Deny" without any following "Allow" or "Deny" directive, denies the access for all.

On the other side a "Order Deny,Allow" without any following "Allow" or "Deny" directive , allows the access for all.