Posted by shimmyshack on 06/20/07 22:25

On Jun 20, 11:17 pm, patpro ~ Patrick Proniewski
<pat...@boleskine.patpro.net> wrote:
> In article <1182359802.321460.10...@o61g2000hsh.googlegroups.com>,
>
> shimmyshack <matt.fa...@gmail.com> wrote:
> > > And, by the way, in that context, i don't see the point of using a
> > > "<LimitExcept GET HEAD OPTIONS>" block to ask for authentication.
>
> > i think it's so that browsers can see the content without being asked
> > for credentials, whereas any agent which tries to use other verbs will
> > be required to authenticate. but explain your objection - I have been
> > wrong before!!!
>
> if you want to protect your code, you need to activate the
> authentication for every verb.
>
> patpro
>
> --http://www.patpro.net/

thats not the case, since for GET HEAD ther server parses and doesnt
realease code. Wheras for the common webdav verbs this is not the
case:
* PROPFIND
* PROPPATCH
* MKCOL
* DELETE
* PUT
* COPY
* MOVE
* LOCK
* UNLOCK

• Next in forum: Re: Backup with mysqldump
• Prev in forum: Re: Disable .php handler for a specific browser,
• Thread view: Re: Disable .php handler for a specific browser,

[Reply to this message]