ISPConfig, Drupal, and .htaccess

[stamy]

Have you restarted apache ?
Your web pages are locatd under /home/www/virtual/*/web and not under /home/www/*/web ?

[pinz0]

hello -
i was reading these entries and tried to fix my problems.
since i've put drupal into my /home/web6/web/cms - directory, i have the
"500 Internal Server Error".


my httpd.conf looks like this:

<Directory /home/*/user/*/web>
    Options +Includes -Indexes
    AllowOverride All
#  AllowOverride Indexes AuthConfig Limit FileInfo
    Order allow,deny
    Allow from all
    <Files ~ "^\.ht">
    Deny from all
    </Files>
</Directory>

and the .htaccess-file looks like this:

#
# Apache/PHP/Drupal settings:
#

# Protect files and directories from prying eyes.
<FilesMatch "(\.(engine|inc|install|module|sh|.*sql|theme|tpl(\.php)?|xtmpl)|code-style\.pl|Entries.*|Repository|Root)$">
  Order deny,allow
  Deny from all
</FilesMatch>

# Set some options.
Options -Indexes
Options +FollowSymLinks

# Customized error messages.
ErrorDocument 404 /index.php

# Set the default handler.
DirectoryIndex index.php

# Override PHP settings. More in sites/default/settings.php
# but the following cannot be changed at runtime.

# PHP 4, Apache 1
<IfModule mod_php4.c>
  php_value magic_quotes_gpc                0
  php_value register_globals                0
  php_value session.auto_start              0
</IfModule>

# PHP 4, Apache 2

this is in the LOG-file (/home/web6/log):

[Wed Aug 02 10:23:16 2006] [alert] [client 85.125.230.181] /home/web6/web/.htaccess: Options not allowed here

so, i really don't know how to make it work properly.
Please folks, help me!

[geek.de.nz]

<Directory /home/*/user/*/web>
    Options +Includes -Indexes
    AllowOverride All
#  AllowOverride Indexes AuthConfig Limit FileInfo
    Order allow,deny
    Allow from all
    <Files ~ "^\.ht">
    Deny from all
    </Files>
</Directory>

change to

<Directory /home/*/user/*/web>
    Options +Includes -Indexes
    AllowOverride All
#  AllowOverride Indexes AuthConfig Limit FileInfo
    Order allow,deny
    Allow from all
#    <Files ~ "^\.ht">
#   Deny from all
#    </Files>
</Directory>

Try this. I'm not sure if that will work, but I think

<Files ~ "^\.ht">
   Deny from all
</Files>

prevents .htaccess to be loaded. "^\.ht" is a regular expression matching files beginning with ".ht", so .ht*.

I could be mistaken though. Have a look at the docs on the apache website.

[falko]

<Directory /home/*/user/*/web>
    Options +Includes -Indexes
    AllowOverride All
#  AllowOverride Indexes AuthConfig Limit FileInfo
    Order allow,deny
    Allow from all
    <Files ~ "^\.ht">
    Deny from all
    </Files>
</Directory>

is the wrong stanza.

It's this stanza:

<Directory /home/*/web>
    Options +Includes -Indexes
    AllowOverride None
    AllowOverride Indexes AuthConfig Limit FileInfo
    Order allow,deny
    Allow from all
    <Files ~ "^\.ht">
    Deny from all
    </Files>
</Directory>

that you must change.

[pinz0]

THANKS!

it works now! many thanks for the quick help.
bests!

[pinz0]

hello again,

another problem showed up with isp-config and drupal .
for some reason it is not possible to view uploaded files.
if i click on the link of the uploaded file the server again posts the "500 error".

is there someone who can help me with that problem?

bests!

[falko]

The problem is the .htaccess file in your files directory. If you remove it, it should work, but as far as I know this opens a security hole so this is not recommended...

[pinz0]

Originally Posted by falko

The problem is the .htaccess file in your files directory. If you remove it, it should work, but as far as I know this opens a security hole so this is not recommended...

thanks for your response.

yes, if i rename or remove the .htaccess-file in /files, than it works fine, but as you mention, this can't be the way..

any recommendations for the .htaccess - file or for another back door-solution?

[pinz0]

ok, i think i have a solution for the problem.
i pasted this into /etc/apache2/apache2.conf:

<Directory /home/*/web/drupal/files>
AllowOverride All
Order allow,deny
Allow from all
</Directory>

i think, that this works for all drupal-installs on the server.

bests!

[nzimas]

Puzzling.

I have tried several recipes to allow .htaccess overrides and still get the error 500.

my apache2.conf looks like:

<Directory /var/www/*/web>
    Options +Includes -Indexes
    AllowOverride All
    AllowOverride Indexes AuthConfig Limit FileInfo
    Order allow,deny
    Allow from all
<Files ~ "^\.ht">
Deny from all
</Files>
</Directory>

The error log reports:

Sat Jun 16 20:49:50 2007] [alert] [client 83.165.10.237] /var/www/web2/web/.htaccess: Options not allowed here, referer: http://www.familythrive.com/administ...ask=showconfig

I have this actual web located at /var/www/web2/web/

Do i need to tweak anything at /etc/apache2/vhosts/Vhosts_ispconfig.con?

Thanks,
Nuno.