I wanted a global option to deny access ... / 2011-02-09

2011-02-09 I wanted a global option to deny access ... 9 years ago
I wanted a global option to deny access to any phpmyadmin url in an apache config. We are migrating long-existing websites with sometimes old content to new hardware and storage. And in the far past some people installed phpmyadmin. With good reasons back then but phpmyadmin has quite a list of security issues. They all get fixed, but we have to hunt down the old versions. So as a stopgap I want to disable all urls on all vhosts which include /phpmyadmin. Global config:
RewriteEngine On
RewriteRule /phpmyadmin - [F,NC,L]
But this isn't inherited by VirtualHosts immediately, as documented in mod_rewrite and vhosts - Apache HTTP server documentation. I need to configure each vhost to inherit the global rewriterules:
RewriteEngine On
RewriteOptions Inherit

Tags: , , ,

, reachable as koos+website@idefix.net. PGP encrypted e-mail preferred.

PGP key 5BA9 368B E6F3 34E4 local copy PGP key 5BA9 368B E6F3 34E4 via keyservers pgp key statistics for 0x5BA9368BE6F334E4 Koos van den Hout
RSS
Other webprojects: Camp Wireless, wireless Internet access at campsites, The Virtual Bookcase, book reviews
This page generated in 0.003839 seconds.