On 7/31/07, Rich Bowen <[EMAIL PROTECTED]> wrote:
>
> On Jul 31, 2007, at 13:50, Eric Covener wrote:
>
> > http://httpd.apache.org/docs/2.0/mod/mod_access.html#order
> >
> > The paragraphs for Deny,Allow and Allow,Deny are (still?) swapped?
>
> It is actually correct. However, it is explained in the most
> confusing way possible. In particular, it is explained in the manner
> that it is actually evaluated in the code, rather than in the manner
> that anyone other than a firewall admin would think about it.
At the moment it reads:
Deny,Allow
First, all Allow directives are evaluated; at least one must
match, or the request is rejected
But Deny,Allow defaults to allowing all access, doesn't it?
>
> There's *got* to be a way to explain what these directives do that
> won't leave almost everybody confused. I get confused every time I
> read these, and have to re-read them several times to figure out if
> they are correct.
>
Agreed, it seems they get more roundabout each time they're updated
--
Eric Covener
[EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
