Re: Returning 404 rather than 403

2012-08-09 Thread Christopher Orr
Hi there, On 08/09/2012 02:33 PM, Tim Pizey wrote: I have done a little googleing around the practice of returning 404 rather than 403 for unauthorised access. Most people seem to think it is bad practice. I imagine the motivation is to prevent automatic url guessing. It would be preferable

Returning 404 rather than 403

2012-08-09 Thread Tim Pizey
Hi, I have done a little googleing around the practice of returning 404 rather than 403 for unauthorised access. Most people seem to think it is bad practice. I imagine the motivation is to prevent automatic url guessing. It would be preferable, for me, if a redirect (307 Temporary Redirect