Home / server / Questions / 469651
Accepted
batfastad
Asked: 2013-01-17 07:06:51 +0800 CST

Apache deny/allow in vhost config and in .htaccess, which takes priority

  • 772

If I specify a Deny from xx.xx.xx.xx Directive in a <Directory /var/www/html/test-directory/></Directory> block in an Apache vhost configuration.
Then specify a different Deny from yy.yy.yy.yy in a .htaccess file in the same directory, which comes out on top?

It's my understanding that .htaccess should always take priority but in the case of Deny/Allow directives with different IP addresses, will the directives merge?
So both xx.xx.xx.xx and yy.yy.yy.yy are denied?

Or will one override the other?
I will do some tests later but I just wondered if anyone knew what should happen theoretically.

apache-2.2

2 Answers

  1. Best Answer

    Specifying any number of Deny directives works just fine; all are applied. However, they can be overridden by an Allow if you've set Order Deny,Allow.

    If you have concerns about the access you're allowing, you should provide a more complete look at your configuration and an explanation of what you're looking to achieve so that we're able to assist.

    • 2

  2. What you can put in these files is determined by the AllowOverride directive. This directive specifies, in categories, what directives will be honored if they are found in a .htaccess file.

    I have copied this sentence from apache docs, where is explained well how works .htaccess.

    • 0