Access Denied

Alessio B. wrote:

 >[cut]
 >I forget to say that I use EasyPHP (Apache 1.3.27) with Win XP Pro sp2
 >Bye
 >
 >
 >
 >
You can use an If statement in PHP to return a 403 Page, I'm not to sure
on exactly how, but I know you can maybe try a php newsgroup they might
be able to help you out.

J.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Access Denied 

Alessio B. said the following on 17/09/2004 07:57:

 > Hi!I'm testing my site over my lan and i notice that user can show the
 > content of all subdirectory!

<a style='text-decoration: underline;' href="http://httpd.apache.org/docs/mod/mod_autoindex.html" target="_blank">http://httpd.apache.org/docs/mod/mod_autoindex.html</a>

"Automatic index generation is enabled with using Options +Indexes. See
the Options directive for more details."

 > I've index page in the root (/Web).
 > I've installed a PHP script in /Web/Script that use a SQL db to authenticate
 > my visitor.

Why is your cgi-bin in your DocumentRoot? It's a script, not a document.
If you have security on your mind, please put cgi-bin somewhere outside
your DocumentRoot and use ScriptAlias so it will be accessible.

And I'm not sure what the directory "Script" is, but the name suggests
it doesn't belong under the DocumentRoot either.

 > The script work well but I also want to set apache to deny browsing of
 > directory and show the "Access Denied" error page when a user try to browse
 > my site!

The above URL will do that if there's not an index.html or whatever
you've set DirectoryIndex to in that dir. You may also use
authentication for several directories, although this is not as strong
as you might expect (brute password guessing can be done).

Anyway, check this URL for it:

<a style='text-decoration: underline;' href="http://httpd.apache.org/docs/howto/auth.html" target="_blank">http://httpd.apache.org/docs/howto/auth.html</a>

--
Regards
Harrie<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: Access Denied