ISSUE-23

There should be some discussion of alternatives to .htaccess

State:

CLOSED

Product:

Recipes

Raised by:

Jon Phipps

Opened on:

2007-02-14

Description:

Many organizations, for performance and security reasons, don't allow the use of
AllowOveride and this precludes the use of .htaccess files completely. We should
include a section that specifically addresses this:

1. Briefly discuss the relative performance and security disadvantages of
.htaccess files, or at least point to such a discussion.

2. Discuss the possibility of enabling AllowOveride on a directory-specific
rather than a global basis to address those issues

3. Point out that each of the recipes can be implemented directly in httpd.conf
files without enabling AllowOveride and show how to do that for at least one of them

4. Include a recipe that rewrites the URL to a very simple cgi script (examples
in perl, php) that would handle the actual redirect. This appears to be the way
the recipes are often implemented.

Related emails:

1. [ALL] Agenda - Sep 18 2007 SWD telecon - 1500 UTC (from baker@sub.uni-goettingen.de on 2007-09-15)
2. [RECIPES] Amsterdam topic 'Recipes' (from baker@sub.uni-goettingen.de on 2007-09-15)
3. Re: [ALL] Agenda - Sep 18 2007 SWD telecon - 1500 UTC (from qreul@csd.abdn.ac.uk on 2007-09-18)
4. Re: [ALL] Agenda - Sep 18 2007 SWD telecon - 1500 UTC (from aisaac@few.vu.nl on 2007-09-18)
5. [Recipes] roadmap to the next draft (from diego.berrueta@fundacionctic.org on 2008-03-11)
6. Re: [Recipes] roadmap to the next draft (from jphipps@madcreek.com on 2008-03-11)
7. Re: [Recipes] Open issues in Recipes (from diego.berrueta@fundacionctic.org on 2008-10-04)
8. Re: [Recipes] Open issues in Recipes (from diego.berrueta@fundacionctic.org on 2008-10-09)

Related notes: