Apache .htaccess filtering

[Salmus]

Hello,

In the past 30 hours I tried to find out a way to block "SetEnv" in .htaccess, the ideea is generally simple (allowoverride none for fileinfo) - but this will break mod_rewrite functionality.

Any clues ? I'm out of ideeas ...
There is any apache mod who can scan .htaccess for arbitrary instructions ?


Thanks

 

[zEitEr]

Hello,

You might want then to disable mod_env completely.

Note, I did not check it, so it's up to you to decide.

 

[Salmus]

That's the easy part, but ... how to define php_ini_scan_dir in a php-cgi environment plus suphp ? I need SetEnv for that (inside virtualhost or directory configurations)

My task is to block SetEnv parameters in .htaccess, I can't do it via AllowOverride becouse mod_rewrite is also using Fileinfo

 

[zEitEr]

Why do you want to disallow to use it in .htaccess?

There is a module SetEnvIf http://httpd.apache.org/docs/2.2/mod/mod_setenvif.html which also can be used for similar purposes.

 

[Salmus]

Indeed, but a little help from a tool who allows me to block certain settings from .htaccess, even SetEnvIf or SetEnvIfNoCase can be blocked.

 

[zEitEr]

OK, nothing more can I do for you with the issue then. Just a piece of an advice to ask the question in Apache mailing lists.