allow deny file and multiple .conf question

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

allow deny file and multiple .conf question

Rose, John B
When controlling access to specific files via Allow/Deny, and not using <Directory> or <Location>, and putting in different .conf files, does the order of the conf files matter?

In other words …

aaa-block.conf has …
<Files “aaa.php>
  Order Deny,Allow
  Deny from All
</Files>

zzz-block.conf has …
<Files “zzz.php”>
  Order Deny, Allow 
  Deny from all
  Allow from your domain.com
</Files>


Would the .conf files similar to one above controlling access previous be negated by the last zzz-block.conf above? In other words “Allow from yourdomain.com" would apply to all the previous <Files> statements? Are the .conf files in the same directory loaded alphabetically by Apache?

Thanks

Reply | Threaded
Open this post in threaded view
|

Re: allow deny file and multiple .conf question

Yehuda Katz
Allow/Deny directives apply to whatever container they are in. A single file can onl.y ever match a single <File> block and the individual <Files> blocks do not have any connection to each other.

In general, .conf files are loaded alphabetically, but in your example, it shouldn't matter.

- Y

On Fri, Jun 9, 2017 at 5:49 PM, Rose, John B <[hidden email]> wrote:
When controlling access to specific files via Allow/Deny, and not using <Directory> or <Location>, and putting in different .conf files, does the order of the conf files matter?

In other words …

aaa-block.conf has …
<Files “aaa.php>
  Order Deny,Allow
  Deny from All
</Files>

zzz-block.conf has …
<Files “zzz.php”>
  Order Deny, Allow 
  Deny from all
  Allow from your domain.com
</Files>


Would the .conf files similar to one above controlling access previous be negated by the last zzz-block.conf above? In other words “Allow from yourdomain.com" would apply to all the previous <Files> statements? Are the .conf files in the same directory loaded alphabetically by Apache?

Thanks