anydomain.com/icons

[hostpc.com]

Tonight a customer brought to my attention that on ANY of their domains, you can access the apache default icon list as

http://yourdomain.com/icons

This block exists in /etc/httpd/conf/httpd.conf

Alias /icons/ "/var/www/icons/"

<Directory "/var/www/icons">
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>

It's not a HUGE deal, but why would that alias need to exist, or DOES it need to be there?

Is this something new? has it always been there - just never addressed before?

Thanks for any insight you can offer.

Joe

 

[nobaloney]

Hmmm...

That's not what I get:

Not Found
The requested URL /icons was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Apache/1.3.33 Server at www.nobaloney.net Port 80

Jeff

 

[hostpc.com]

Do you have this in httpd.conf (RHEL)

<IfModule mod_alias.c>

Alias /icons/ "/var/www/icons/"

<Directory "/var/www/icons">
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>

Alias /server-images/ "/var/www/html/images/"
<Directory "/var/www/html/images">
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>

#ScriptAlias /cgi-sbin/ "/var/www/cgi-bin/"
<Directory "/var/www/cgi-sbin">
AllowOverride None
Options None
Order allow,deny
Allow from all
</Directory>

</IfModule>

If not, maybe you edited it out?

 

[nobaloney]

We have it (along with some comments on it).

We have mod_alias.c installed.

And we have the directory, along with contents.

And we don't have an .htaccess file in the directory, or in the parent directory, which forbids listing it.

So it's all quite curious.

Jeff

 

[mike_p]

Err... Jeff. Try

http://www.nobaloney.net/icons/

(with the trailing slash)

They're all there!

Personally I make good use of this Apache shared resource and have added additional logos and images (for my branding) to it and have created some of my own server-wide shared directories.

 

[nobaloney]

Thanks for pointing that out; I never thought of adding the "/" character.

Yes, I think I'll be using some of them as well.

And to answer the original question, I don't see any reason to leave the universal link...

Unless of course somewhere in apache documentation there's something saying they're always available ... in which case that's the reason for the link.

Jeff