How to allow .htaccess file

[Skprorok]

Originally Posted by till

And you have tested this exact .htaccess file on another server without doing any modifications in it and you do not receibve any error messages in the error log anymore?

I have tested this exact .htaccess file on another server without any modifications and I don't recieve any error...

When i copy content of .htaccess file to Apache directives it still doesn't works.

[rlischer]

Originally Posted by Skprorok

I have tested this exact .htaccess file on another server without any modifications and I don't recieve any error...

When i copy content of .htaccess file to Apache directives it still doesn't works.

I am having the same problem. I used a working .htaccess file from a working site and I am trying to duplicate the site on my new server. If I delete it I can see the site, but then I guess mod_rewrite stops working in that folder.

[till]

If you dont use the eaxct same application then you dont have the same eror! Without writing exact error descriptions, nobody is able to help you.

If something dont work in a website, look into the error log of the website.

[rlischer]

Originally Posted by till

If you dont use the eaxct same application then you dont have the same eror! Without writing exact error descriptions, nobody is able to help you.

If something dont work in a website, look into the error log of the website.

I know I don't have the same app, but .php is not working correctly for me.

my error with .htaccess:

[Thu Aug 06 15:50:21 2009] [alert] [client 66.42.xxx.xxx] /var/www/clients/client4/web6/web/calls/.htaccess: Options not allowed here

without the .htaccess

[Thu Aug 06 16:04:48 2009] [error] [client 66.42.xxx.xxx] File does not exist: /var/www/clients/client4/web6/web/calls/admin-add-user, referer: http://www.mysite.net/calls/admin.php

[till]

Ok, then move the "Options ...." lines from the .htaccess file to the apache directives field of the website. And plese dont post to other threads, make your own thraed for your own problem.

[rlischer]

Originally Posted by till

Ok, then move the "Options ...." lines from the .htaccess file to the apache directives field of the website. And plese dont post to other threads, make your own thraed for your own problem.

I don't know what "apache directives" are. I just wanted to subscribe to this thread to see if he ever found a solution. I do have another thread and you were helping over there. Thanks

[Skprorok]

Originally Posted by till

Ok, then move the "Options ...." lines from the .htaccess file to the apache directives field of the website. And plese dont post to other threads, make your own thraed for your own problem.

I tried to copy content of .htaccess file to Apache directives, but it still doesn't working. And i dont have any errors in error.log.

[dxr]

ISPConfig has disabled .htaccess per default. You need add this directive to httpd.conf:

<Directory />
       AllowOverride All
</Directory>

And all your .htaccess will star work. BUT Till said me:

Setting these things in .htaccess is not allowed for security reasons
as it would allow poaple e.g. to
enable disabled functions too. Instead, just add the line:
php_value memory_limit 128M
in the apache directives field in ispconfig.

http://us2.php.net/configuration.changes
http://us2.php.net/manual/en/ini.list.php

Php disable some directives for only setup in php.ini, i think allow .htaccess is not a security reason, ISPConfig has other security problems more importants.

For example 'Magento' need change some php directives in .htaccess, but its disabled, i think is very hard for the user change .htaccess from the control panel every time he need change it, or install new CMS, etc...

[till]

With "Allow override all" you can change also the interpreter for any file ending e.g. .php files, so you can esily come around any restrictions on the system. Enebling the overriding for everything is not recommended on systms that run websites for customers.

[dxr]

Originally Posted by till

With "Allow override all" you can change also the interpreter for any file ending e.g. .php files, so you can esily come around any restrictions on the system. Enebling the overriding for everything is not recommended on systms that run websites for customers.

Show me examples, please.

Imagine my server with 50 websites and htaccess with "Allowoverride All"

How to can hack other websites from localhost or to do unstable the server.