Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: no ACL defined for wwwroot but still accessible |
|
| Author |
|
flatcircle
Joined: 27 Jun 2006
Posts: 79
|
 Posted: Thu 27 Jul '06 8:30 Post subject: no ACL defined for wwwroot but still accessible |
 |
|
Hello
I'm running Apache on Windows.
Following directories are defined:
PHP - read access network service
Apace - read access apache account, read/write for log directory
My wwwroot - no one! So I have removed the group 'everyone'
Normally the webfiles shouldn't be accessible because on my wwwroot nobody (only Administrators) are allowed.
But I see my website in full glory. What's the catch? Am I missing something here? Is Apache ignoring the NTFS permissions on the wwwroot?
Don't have a clue....
Regards. |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7298
Location: Germany, Next to Hamburg
|
| Posted: Thu 27 Jul '06 9:29 Post subject: |
|
|
DocumentRoot "/server2/www"
<Directory "/server2/www">
Options Indexes FollowSymLinks
AllowOverride None
Order allow,deny
Deny from all
</Directory>
That should work as well. Or put a .htaccess file in the wwwroot.
No, Apache is not ignoring NTFS. I guess Apache is running as Administrator, too. Remove from the permission list of the wwwroot all users but System. Try again |
|
| Back to top |
|
flatcircle
Joined: 27 Jun 2006
Posts: 79
|
| Posted: Thu 27 Jul '06 10:39 Post subject: |
|
|
thanks for the reply.
Already tried that. (removed everyone but admin) It seems like Apache is not picking up NTFS permissions. |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7298
Location: Germany, Next to Hamburg
|
| Posted: Thu 27 Jul '06 11:18 Post subject: |
|
|
| flatcircle wrote: | | (removed everyone but admin) |
| James Blond wrote: | | all users but System |
Did you also see under Security for users?
Under which User is Apache runnig? how do you start? service? by hand? |
|
| Back to top |
|
|
|
|
|
|
