[Volunteers] [svlug] nifties listing?

Ian Kluft ikluft at thunder.sbay.org
Wed Oct 12 14:55:19 PDT 2005

On Wed, Oct 12, 2005 at 01:57:27PM -0700, Bill Ward wrote:
> I've never understood why people think it's a security hole to not allow the
> built-in Apache directory listing. I'm tempted to enable it, at least for
> this directory, or to AllowOverride it so that Rick can put it in a
> .htaccess file. Anyone have a strong opinion about it?

AllowOverride is not a problem if you know who your users are.  Apache can't
make that assumption on the default settings for the code.

More information about the volunteers mailing list