Is it possible to have an .htaccess/.htpasswd access control setup for a given directory, but if they are from a specific IP address, bypass the login/password authentication?

I know you can do something like this in the .htaccess file:

    order deny,allow
    deny from all
    allow from 000.000.000.000

But if you add something along these lines:

    AuthType Basic
    AuthName &quot;restricted area&quot;
    AuthUserFile /path/to/.htpasswd
    require valid-user

Then it prompts for the password. Is there any way to do an if/else type setup, or some other solution so that users as a given IP (or set of IPs) don&#39;t get prompted for a password, but everyone else does?


.htaccess / .htpasswd bypass if at a certain IP address

I have ``cmsplus.dev`` under ``/etc/apache2/sites-available`` with the following code,

    &lt;VirtualHost *:80&gt;
    	ServerAdmin master@server.com
    	ServerName www.cmsplus.dev
    	ServerAlias cmsplus.dev
    	
    	DocumentRoot /var/www/cmsplus.dev/public
    
    	LogLevel warn
    	ErrorLog /var/www/cmsplus.dev/log/error.log
    	CustomLog /var/www/cmsplus.dev/log/access.log combined
    &lt;/VirtualHost&gt;

Now when I use ``sudo /usr/sbin/a2ensite cmsplus.dev``, I am getting the error,

    ERROR: Site cmsplus.dev does not exist!

My webserver ``Apache/2.4.6 (Ubuntu)``

How to solve this issue?

Site does not exist error for a2ensite

I&#39;ve been cleaning up my project lately. I have a main .htaccess in the root directory and 6 others. 5 of them ran `Options -Indexes` which i didn&#39;t see anypoint of allowing any Directory viewing so moved that to the main one. so now i only have 2 .htaccess files. the main and one in `/system` which holds

    # Block External Access
    deny from all

So i wanted to run that on `/system` only from within the main. So i deleted the one in /system and added

     # Block External Access
    &lt;Directory &quot;/system/&quot;&gt;
    deny from all
    &lt;/Directory&gt;

 to my main .htaccess file leaving 1! 

but now i get a 

&gt; Internal Server Error
&gt; 
&gt; The server encountered an internal error or misconfiguration and was
&gt; unable to complete your request.
&gt; 
&gt; Please contact the server administrator, webmaster@localhost and
&gt; inform them of the time the error occurred, and anything you might
&gt; have done that may have caused the error.
&gt; 
&gt; More information about this error may be available in the server error
&gt; log.
&gt; 
&gt; Apache/2.2.17 (Ubuntu) Server at 10.0.1.5 Port 80

The goal is to block reading any files in /system and it&#39;s sub directory&#39;s but allow viewing of everything else all from one `.htaccess` file for the whole project. Any ideas on how i can fix this? I did some Google searches but couldn&#39;t really come out with anything.

htaccess &lt;Directory&gt; deny from all

**Problem:** OpenSSL is not working in my Windows environment. OpenSSL repeatedly reports errors 0x02001003, 0x2006D080 and 0x0E064002.

**Environment:**

    Windows NT x 6.1 build 7601 (Windows 7 Business Edition Service Pack 1) i586
    Apache/2.4.4 (Win32)
    PHP/5.4.13 x86
    PHP Directory: E:\wamp\php\
    Virtual Host Directory: E:\Projects\1\public_html

**What I&#39;ve Attempted:**

 - **Installation Instructions** http://www.php.net/manual/en/openssl.installation.php
 - **PHP.ini** `extension=php_openssl.dll`
 - **Openssl.cnf** `E:\wamp\php\extras\openssl.cnf`
 - **%PATH%** `E:\wamp\php`
 - **Rebooted**
 - **phpinfo:**  
----OpenSSL support	enabled  
----OpenSSL Library Version	OpenSSL 1.0.1e 11 Feb 2013  
----OpenSSL Header Version	OpenSSL 0.9.8y 5 Feb 2013  
 - With and without specifying **config** in `configargs`
 - With and without specifying `&lt;Directory E:\wamp\php\extras&gt;` in apache config
 - Copied `openssl.cnf` to virtualhost public_html, pointed to that and still get same errors
 - Nothing logged in **error_log**
 - **Researched:** I&#39;ve spent the last 2 days researching this, surprised there isn&#39;t more info on it so I&#39;m posting here. Seems to be problem with OpenSSL config or apache/php not reading config properly.
  
**Code:**  

    $privateKey = openssl_pkey_new();
    while($message = openssl_error_string()){
    	echo $message.&#39;&lt;br /&gt;&#39;.PHP_EOL;
    }

**Results:**

    error:02001003:system library:fopen:No such process
    error:2006D080:BIO routines:BIO_new_file:no such file
    error:0E064002:configuration file routines:CONF_load:system lib
    error:02001003:system library:fopen:No such process
    error:2006D080:BIO routines:BIO_new_file:no such file
    error:0E064002:configuration file routines:CONF_load:system lib

**OpenSSL Manually:**

    E:\wamp\apache\bin&gt;openssl.exe pkey
    WARNING: can&#39;t open config file: c:/openssl-1.0.1e/ssl/openssl.cnf
    
    E:\wamp\apache\bin&gt;set OPENSSL_CONF=&quot;E:\wamp\php\extras\openssl.cnf&quot;
    
    E:\wamp\apache\bin&gt;openssl.exe pkey
    3484:error:0200107B:system library:fopen:Unknown error:.\crypto\bio\bss_file.c:169:fopen(&#39;&quot;E:\wamp\php\extras\openssl.cnf&quot;&#39;,&#39;rb&#39;)
    3484:error:2006D002:BIO routines:BIO_new_file:system lib:.\crypto\bio\bss_file.c:174:
    3484:error:0E078002:configuration file routines:DEF_LOAD:system lib:.\crypto\conf\conf_def.c:199:

**EDIT:**

 1. Thanks to @Gordon I can now see open_ssl errors using `openssl_error_string`
 2. Completely uninstall EasyPHP. Manually installed stable versions of PHP/Apache. Same results! Definitely something I&#39;m doing wrong with implementing openssl on windows.
 3. OpenSSL Manually section... additional error info

**FINAL THOUGHTS:**  
I set up a linux box and I&#39;m getting the same errors. After some playing around I see that even though it&#39;s throwing errors at the openssl_pkey_new it does eventually create my test p12 file. Long story short, the errors are misleading and it has to deal more with **how** you are using openssl functions not so much server-side configuration.

Final code:


    // Create the keypair
    $res=openssl_pkey_new();
    
    // Get private key
    openssl_pkey_export($res, $privkey);
    
    // Get public key
    $pubkey=openssl_pkey_get_details($res);
    $pubkey=$pubkey[&quot;key&quot;];
    
    // Actual file
    $Private_Key = null;
    $Unsigned_Cert = openssl_csr_new($Info,$Private_Key,$Configs);
    $Signed_Cert = openssl_csr_sign($Unsigned_Cert,null,$Private_Key,365,$Configs);
    openssl_pkcs12_export_to_file($Signed_Cert,&quot;test.p12&quot;,$Private_Key,&quot;123456&quot;);

**Close away.**


**A year later...**

So I found myself doing this again a year later, and regardless of whatever PATH variables I set on the computer or during the script execution, it kept erroring about file not found. I was able to resolve it by passing in the `config` parameter in the `config_args` array in `openssl_pkey_new`. Here is a function that tests the ability to successfully use OpenSSL:

        /**
         * Tests the ability to 1) create pub/priv key pair 2) extract pub/priv keys 3) encrypt plaintext using keys 4) decrypt using keys
         * 
         * @return boolean|string False if fails, string if success
         */
        function testOpenSSL($opensslConfigPath = NULL)
        {
            if ($opensslConfigPath == NULL)
            {
                $opensslConfigPath = &quot;E:/Services/Apache/httpd-2.4.9-win32-VC11/conf/openssl.cnf&quot;;
            }
            $config = array(
                &quot;config&quot; =&gt; $opensslConfigPath,
                &quot;digest_alg&quot; =&gt; &quot;sha512&quot;,
                &quot;private_key_bits&quot; =&gt; 4096,
                &quot;private_key_type&quot; =&gt; OPENSSL_KEYTYPE_RSA,
            );

            $res = openssl_pkey_new($config); // &lt;-- CONFIG ARRAY
            if (empty($res)) {return false;}

            // Extract the private key from $res to $privKey
            openssl_pkey_export($res, $privKey, NULL, $config); // &lt;-- CONFIG ARRAY

            // Extract the public key from $res to $pubKey
            $pubKey = openssl_pkey_get_details($res);
            if ($pubKey === FALSE){return false;}

            $pubKey = $pubKey[&quot;key&quot;];

            $data = &#39;plaintext data goes here&#39;;

            // Encrypt the data to $encrypted using the public key
            $res = openssl_public_encrypt($data, $encrypted, $pubKey);
            if ($res === FALSE){return false;}

            // Decrypt the data using the private key and store the results in $decrypted
            $res = openssl_private_decrypt($encrypted, $decrypted, $privKey);
            if ($res === FALSE){return false;}

            return $decrypted;
        }

        // Example usage:
        $res = testOpenSSL();
        if ($res === FALSE)
        {
            echo &quot;&lt;span style=&#39;background-color: red;&#39;&gt;Fail&lt;/span&gt;&quot;;
        } else {
            echo &quot;&lt;span style=&#39;background-color: green;&#39;&gt;Pass: &quot;.$res.&quot;&lt;/span&gt;&quot;;
        }

OpenSSL not working on Windows, errors 0x02001003 0x2006D080 0x0E064002

Spent hours going in circles following every guide I can find on the net.

I want to have two sites running on a single apache instance, something like this -
192.168.2.8/site1
and
192.168.2.8/site2

I’ve been going round in circles, but at the moment I have two conf files in ‘sites-available (symlinked to sites-enabled)’ that look like this-


    &lt;VirtualHost *:2000&gt;

    ServerAdmin webmaster@site1.com
    ServerName site1
    ServerAlias site1
    
    # Indexes + Directory Root.
    DirectoryIndex index.html
    DocumentRoot /home/user/site1/
    
    # CGI Directory
    ScriptAlias /cgi-bin/ /home/user/site1/cgi-bin/
    
    Options +ExecCGI
    
    # Logfiles
    ErrorLog /home/user/site1/logs/error.log
    CustomLog /home/user/site1/logs/access.log combined
    
    &lt;/VirtualHost&gt;

and

    &lt;VirtualHost *:3000&gt;
    
    ServerAdmin webmaster@site2.com
    ServerName site2
    ServerAlias site2
    
    # Indexes + Directory Root.
    DirectoryIndex index.html
    DocumentRoot /home/user/site2/
        
    # CGI Directory
    ScriptAlias /cgi-bin/ /home/user/site2/cgi-bin/
    
    Options +ExecCGI
    
    # Logfiles
    ErrorLog /home/user/site2/logs/error.log
    CustomLog /home/user/site2/logs/access.log combined
    
    &lt;/VirtualHost&gt;

http.conf looks like this-

    NameVirtualHost *:2000
    NameVirtualHost *:3000
    
At the moment I’m getting this error-

    [error] VirtualHost *:80 — mixing * ports and non-* ports with a NameVirtualHostaddress is not supported, proceeding with undefined results

Ports.conf looks like this – (although no guides have mentioned any need to edit this)

    NameVirtualHost *:80
    
    Listen 80
    &lt;IfModule mod_ssl.c&gt;
    # If you add NameVirtualHost *:443 here, you will also have to change
    # the VirtualHost statement in /etc/apache2/sites-available/default-ssl
    # to &lt;VirtualHost *:443&gt;
    # Server Name Indication for SSL named virtual hosts is currently not
    # supported by MSIE on Windows XP.
    Listen 443
    &lt;/IfModule&gt;
    
    &lt;IfModule mod_gnutls.c&gt;
    Listen 443
    &lt;/IfModule&gt;
    
Can anyone give some simple instructions to get this running? Every guide I’ve found  says to do it a different way, and each one leads to different errors. I&#39;m obviously doing something wrong but have found no clear explanation of what that might be.

Just want one site accessible on port 2000 and the other accessible on port 3000 (or whatever, just picked those ports to test with).

I’m running Ubuntu server 12.04…


=============
EDIT
=============

Followed another &#39;guide&#39;...

I&#39;ve now set this up in sites-available:
 
    &lt;VirtualHost *:80&gt;
        DocumentRoot &quot;/home/user/site1/&quot;
        ServerName 192.168.2.10/site1
    &lt;/VirtualHost&gt;
    
    &lt;VirtualHost *:80&gt;
        DocumentRoot &quot;/home/user/site2/&quot;
        ServerName 192.168.2.10/site2
    &lt;/VirtualHost&gt;

Have set this in apache2.conf:

    ServerName site1
    ServerName site2

Have added this to ports.conf:

    Listen 192.168.2.10:80


==============
EDIT
==============

It now works, I put this in a conf file in site-enabled:

    &lt;VirtualHost *:81&gt;
        DocumentRoot &quot;/home/user/site1/&quot;
        ServerName site1
    &lt;/VirtualHost&gt;
    
    &lt;VirtualHost *:82&gt;
        DocumentRoot &quot;/home/user/site2/&quot;
        ServerName site2
    &lt;/VirtualHost&gt;

I have this in ports.conf:

    Listen *:80
    Listen *:81
    Listen *:82


I have this in apache2.conf:

    ServerName site1
    ServerName site2


I didn&#39;t find this in any guides I just got it working through an entire day of trial and error so I don&#39;t know if this is a good solution. But it&#39;s at least working how I want it to now.






How to run multiple sites on one apache instance

I&#39;m running ubuntu 13.04 64bit on my desktop, I installed Apache2, MySQL and PHP etc.

I wanted to have my web root in `/home/afflicto/public_html` instead of `/var/www`.
So I went along with this guide:  
http://www.maketecheasier.com/install-and-configure-apache-in-ubuntu/2011/03/09  
(I did everything from &quot;configuring different sites&quot;) as I like the solution more.

**Here&#39;s what I did:**  
Installed Apache2, MySQL etc..  
copied `/etc/apache2/sites-avaliable/default` to `/etc/apache2/sites-available/afflicto`. Then edited it, it now looks like the following:

**/etc/apache2/sites-available/afflicto**  

    &lt;VirtualHost *:80&gt;
	ServerAdmin webmaster@localhost

	DocumentRoot /home/afflicto/public_html
	&lt;Directory /&gt;
		Options FollowSymLinks
		AllowOverride None
	&lt;/Directory&gt;
	&lt;Directory /home/afflicto/public_html/&gt;
		Options Indexes FollowSymLinks MultiViews
		AllowOverride All
		Order allow,deny
		allow from all
	&lt;/Directory&gt;

	ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
	&lt;Directory &quot;/usr/lib/cgi-bin&quot;&gt;
		AllowOverride None
		Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
		Order allow,deny
		Allow from all
	&lt;/Directory&gt;

	ErrorLog ${APACHE_LOG_DIR}/error.log

	# Possible values include: debug, info, notice, warn, error, crit,
	# alert, emerg.
	LogLevel warn

	CustomLog ${APACHE_LOG_DIR}/access.log combined
    &lt;/VirtualHost&gt;  

I did `sudo a2dissite default &amp;&amp; sudo a2ensite afflicto &amp;&amp; sudo service apache2 restart`  

I created a `index.php` and `index.html` in `/home/afflicto/public_html/test/`  
when accessing `localhost/test` or `localhost/test/index.html` etc, I get 403 forbidden error.  

What am I doing wrong? thanks in advance.

**update 1**  
I have set the owner of the public_html directory to `www-data`.  
Also `sudo chmod -R +x public_html &amp;&amp; sudo chmod -R 777 public_html`  
Still same 403 error.

Here&#39;s the output of the apache error log:  

    [Sun Jul 14 06:10:32 2013] [error] [client 127.0.0.1] (13)Permission denied: access to / denied

    [Sun Jul 14 06:10:32 2013] [error] [client 127.0.0.1] (13)Permission denied: access to /favicon.ico denied

Apache2 virtualhost 403 forbidden?

I am using apache2 for a project and I am wondering what is exactly the difference between these commands:

```
service apache2 restart
service apache2 reload
service apache2 graceful
```


What is the difference between apache2 reload, restart, graceful?

After the server PHP upgrade I am getting the following error with PHP Version 5.6.2 on Apache 2.0

    A PHP Error was encountered
    Severity: Notice
    Message: Only variable references should be returned by reference
    Filename: core/Common.php
    Line Number: 257

How can I fix this?


Only variable references should be returned by reference - Codeigniter

I have edited the variable _AllowOverride_ for one of my websites in _sites-enabled_ directory. How  do I reload the new configuration without restarting apache? Is it possible?

How to reload apache configuration for a site without restarting apache?

My current urls look like this `[mysite]index.php/[rest of the slug]`.  
I want to strip `index.php` from these urls. 

`mod_rewrite` is enabled on my apache2 server. In `config`, `$config[&#39;index_page&#39;] = &#39;&#39;;` 

My codeignitor root `.htaccess` file contains, 

    RewriteEngine on
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule .* index.php/$0 [PT,L]

But still it is not working. Where am I going wrong? 

CodeIgniter removing index.php from url

What is use of these two directories in Apache&amp;nbsp;2 and how can we do it?


What is the difference between the &#39;sites-enabled&#39; and &#39;sites-available&#39; directory?

I have a website that I use github (closed source) to track changes and update site. The only problem is, it appears the .git directory is accessible via the web. How can I stop this and still be able to use git?

Should I use .htaccess?
Should I change permissions of .git?

Make .git directory web inaccessible

I am trying to upload 30MB file on my server and its not working.

1. When I upload 30MB file, the page loads &quot;**Page Not Found**&quot;

2. When I upload a 3MB file, I receive &quot;**413 Request Entity Too Large**&quot; with nginx/0.6.32

I am trying to find nginx so I can increase &quot;**client_max_body_size**&quot; but I am unable to find nginx installed on my server. I even tried running:

    vi /etc/nginx/nginx.conf

or

    vi /usr/local/nginx/conf/nginx.conf

to check if the config file exists, but I couldnt find it on my server. 

Is there anyway to resolve this issue? Or do I have to installed nginx on my server.

EDIT:

I have made all necessary changes in my php.ini files,

    post_max_size 128M
    upload_max_filesize 100M
    memory_limit 256M

Thanks,
Raju

413 Request Entity Too Large - File Upload Issue

I have just installed Apache 2.2.17, and I am using it first time. 

Now when I try to start the server using the command `service httpd start` it gives me the message:

&gt; httpd: Could not reliably determine the server&#39;s fully qualified domain name, using ::1 for ServerName

Now I think I have to set ServerName and the IP address as I search through Google. But I don&#39;t know in which file I have to set.

How can I fix this problem?

Could not reliably determine the server&#39;s fully qualified domain name

It&#39;s hard to find Mac-specific answers to this question on the web, so I&#39;m hoping someone out there can put this one to rest for me? My permissions are screwed up on my sites and I&#39;m not sure how to fix them without just slamming a recursive 777 on everything which is quite obviously incorrect.

Thanks!

Correct owner/group/permissions for Apache 2 site files/folders under Mac OS X?

I use centOS server.  I want to configure apache to listen on port 8079.
I added LISTEN 8079 directive in `httpd.conf`.  
I opened port 8079 in iptables and restarted iptables. I even stopped iptables service.

    &quot;netstat -nal | grep 8079&quot; shows &quot;tcp  0 0 :::8079 :::* LISTEN&quot;

If I try to access `http://localhost:8079` or `http://myserver.com:8079` from that machine, I can access that page.  BUT from any other machine I am not able to access the site on any port other than 80. On port 80, it works. On port 8079 it does not.  

What else do I need to configure?  




Configure apache to listen on port other than 80

I&#39;m having some trouble setting up Apache on Ubuntu. I&#39;ve been following [this guide][1].

    # /usr/sbin/apache2 -v
    Server version: Apache/2.2.17 (Ubuntu)
    Server built:   Feb 22 2011 18:33:02

My public directory, /var/www, can successfully serve up and execute PHP pages that are placed in it. However, I want to create a symlink in /var/www that points to a directory in my home folder and serve pages there. 

    [root /var/www]# ll
    total 36
    drwxr-xr-x  3 root root 4096 2011-09-11 14:22 .
    drwxr-xr-x 14 root root 4096 2011-06-04 22:49 ..
    lrwxrwxrwx  1 root root   16 2011-09-11 13:21 about -&gt; /root/site/about

When I try to access /about on browser, I get 

    Forbidden
    
    You don&#39;t have permission to access /about on this server.

As far as I know, I gave sufficient privileges to the files I want to serve:

    [root ~/site/about]# ll
    total 24
    drwxr-xr-x 5 root root 4096 2011-09-11 13:20 .
    drwxr--r-- 3 root root 4096 2011-09-11 13:19 ..
    drwxr-xr-x 2 root root 4096 2011-09-11 13:21 contact
    -rwxr-xr-x 1 root root 1090 2011-09-11 13:19 index.php
    drwxr-xr-x 2 root root 4096 2011-09-11 13:20 me
    drwxr-xr-x 2 root root 4096 2011-09-11 13:21 resume

I&#39;m aware of the FollowSymLinks option, and I believe it&#39;s set in my /etc/apache2/sites-enabled/000-default file:

    DocumentRoot /var/www
    &lt;Directory /&gt;
        Options FollowSymLinks
        AllowOverride None
    &lt;/Directory&gt;
    &lt;Directory /var/www/&gt;
        Options FollowSymLinks Indexes MultiViews
        AllowOverride None
        Order allow,deny
        allow from all
    &lt;/Directory&gt;

Any idea what I could be missing?


  [1]: http://library.linode.com/lamp-guides/ubuntu-11.04-natty

Apache won&#39;t follow symlinks (403 Forbidden)

I&#39;m trying to figure out what is the full complete configuration of an httpd setup.  

All the configurations files are scattered in different files (/etc/httpd/conf.d, httpd.conf, various mod configs)  

Is there a way to list the final httpd configuration?  
Like the whole running setup configuration in a single file?

How can I view the complete httpd configuration?

I get this error when trying to access localhost via a browser.

    AH01630: client denied by server configuration

I checked my site folder permissions using:

    sudo chmod 777 -R *

Here is my configuration file:

    &lt;VirtualHost *:80&gt;
	ServerAdmin webmaster@localhost

	DocumentRoot /home/user-name/www/myproject
	&lt;Directory /&gt;
		Options FollowSymLinks
		AllowOverride all
		Allow from all
	&lt;/Directory&gt;

	&lt;Location /&gt;
	  Allow from all
	  Order Deny,Allow
	&lt;/Location&gt;

	&lt;Directory  /home/user-name/www/myproject/&gt;
		Options Indexes FollowSymLinks MultiViews
		AllowOverride all
		Order allow,deny
		Allow from all
	&lt;/Directory&gt;

	ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
	&lt;Directory &quot;/usr/lib/cgi-bin&quot;&gt;
		AllowOverride all
		Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
		Order allow,deny
		Allow from all
	&lt;/Directory&gt;

	ErrorLog ${APACHE_LOG_DIR}/error.log

	# Possible values include: debug, info, notice, warn, error, crit,
	# alert, emerg.
	LogLevel warn

	CustomLog ${APACHE_LOG_DIR}/access.log combined

    Alias /doc/ &quot;/usr/share/doc/&quot;
    &lt;Directory &quot;/usr/share/doc/&quot;&gt;
        Options Indexes MultiViews FollowSymLinks
        AllowOverride all
        Order deny,allow
        Deny from all
        Allow from 127.0.0.0/255.0.0.0 ::1/128
    &lt;/Directory&gt;

&lt;/VirtualHost&gt;

Apache2: &#39;AH01630: client denied by server configuration&#39;

What techniques and/or modules are available to implement robust rate limiting (requests|bytes/ip/unit time) in apache?

How can I implement rate limiting with Apache? (requests per second)

I already have purchased SSL certificate and i have received certificate and a .pem file as a private key? from the supplier; now i need to convert this .pem key into .key for bitnami Redmine Apache web server in order to make it work.

How do I go about doing this what what program or commands to do this?  I am a newbie in terms of using Openssl etc to do this.

Any advice would be much appreciated!

Thank you.

How to convert .pem into .key?

I&#39;m currently trying to place a URL within a URL. For example:
 
    http://example.com/url/http%3A%2F%2Fwww.url2.com

I&#39;m aware that I have to encode the URL, which I have done, but now I am getting a `404` error back from the server rather than my app. I think my problem lies with apache and can be fixed with the `AllowEncodedSlashes On` directive.

I&#39;ve tried putting the directive at the bottom of the httpd.conf to no effect, and am unsure what to do next. Am I putting it in the right place? If so, does anyone have any other solutions?


Need to allow encoded slashes on Apache

During the installation of Apache2 I got the following message into cmd window:


&gt; Installing the Apache2.2 service The
&gt; Apache2.2 service is successfully
&gt; installed. Testing httpd.conf....
&gt; 
&gt; Errors reported here must be corrected
&gt; before the service can be started.
&gt; httpd.exe: Could not reliably
&gt; determine the server&#39;s fully qualified
&gt; domain name , using 192.168.1.3 for
&gt; ServerName (OS 10048)Only one usage of
&gt; each socket address (protocol/network
&gt; address/port) is normally permitted. 
&gt; : make_sock: could not bind to address
&gt; 0.0.0.0:80 no listening sockets available, shutting down Unable to
&gt; open logs Note the errors or messages
&gt; above, and press the &lt;ESC&gt; key to
&gt; exit.  24...

and after installing everything look fine, but it isn&#39;t. If I try to start service I got the following message:

&gt; Windows could not start the Apache2 on
&gt; Local Computer.  For more information,
&gt; review the System Event Log.  If this
&gt; is a non-Micorsoft service, contact
&gt; the service vendor, and refer to
&gt; service-specific error code 1.

Apach2 version is 2.2.9

Does anyone have the same problem, or could help me.




Windows could not start the Apache2 on Local Computer - problem

I have a web application that adds contextual information to [XmlHttpRequest][1] objects using the [setRequestHeader][2] API.  I am using a custom header name (e.g. X-Foo) and a [JSON][3] structured value.  It isn&#39;t part of the URL QueryString or POST body because it is meta information about the request.

Is there a practical size limit to the header value?  If my JSON gets truncated, it becomes unparseable.   I am most concerned with limits in Apache 2, Tomcat 6 and IIS 7.  I did a Google search for **http header length limit**, but many of the results seem dated.  There are some relevant comments in [How big can a user agent string get?][4] but not as specific as I would like.

**Edit:**
I just ran across this similar question - [Maximum on http header values?][5]


  [1]: http://www.w3.org/TR/XMLHttpRequest/
  [2]: http://www.w3.org/TR/XMLHttpRequest/#setrequestheader
  [3]: http://www.json.org/
  [4]: https://stackoverflow.com/questions/654921/how-big-can-a-user-agent-string-get
  [5]: https://stackoverflow.com/questions/686217/maximum-on-http-header-values

Is there a practical HTTP Header length limit?

I&#39;m using a shared hosting which uses cPanel as its control panel and within the cPanel `public_html` is the default root directory, because of this I can&#39;t get my Laravel application work properly.

Is there any way to make Laravel use `public_html` instead of public folder?

How to change public folder to public_html in laravel 5

I&#39;ve got an Apache server that has one access log file that is topping 600MB.  This makes it really hard to search the file or parse it.  
What software or modules for Apache are available that will make a daily copy of my access file to make it more manageable?



Best way to rotate Apache log files

Apache Server 2.4 with mod_jk  1.3.7 not working for ssl (https)

**Error 1:**

&gt;&gt;The Apache service named  reported the following error:
&gt;&gt;&gt; SSLSessionCache: &#39;shmcb&#39; session cache not supported (known names: ). Maybe you need to load the appropriate socache module (mod_socache_shmcb?).    

**Error 2:**

&gt;&gt;Faulting application name: httpd.exe, version: 2.4.4.0, time stamp: 0x512fec36
Faulting module name: mod_jk.so, version: 1.2.37.0, time stamp: 0x4fc48072
Exception code: 0xc0000005
Fault offset: 0x000000000000752d
Faulting process id: 0x3580
Faulting application start time: 0x01cee6d2be493d71
Faulting application path: C:\Program Files\Apache Software Foundation\Apache2.4\bin\httpd.exe
Faulting module path: C:\Program Files\Apache Software Foundation\Apache2.4\modules\mod_jk.so
Report Id: f8d090fa-52c6-11e3-bce9-e4d53d737212


Our configuration for `httpd_ssl.conf` is as follows:

	Listen 443

	SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5

	SSLPassPhraseDialog  builtin

	SSLSessionCache        &quot;shmcb:C:/Program Files/Apache Software Foundation/Apache2.4/logs/ssl_scache(512000)&quot;
	SSLSessionCacheTimeout  300

	&lt;VirtualHost _default_:443&gt;

	DocumentRoot &quot;C:/Program Files/Apache Software Foundation/Apache2.4/htdocs&quot;
	ServerName 127.0.0.1:443
	ServerAdmin admin@mshome.net
	ErrorLog &quot;C:/Program Files/Apache Software Foundation/Apache2.4/logs/error.log&quot;
	TransferLog &quot;C:/Program Files/Apache Software Foundation/Apache2.4/logs/access.log&quot;

	SSLEngine on

	SSLCertificateFile &quot;C:/Program Files/Apache Software Foundation/Apache2.4/conf/serverssl.crt&quot;

	SSLCertificateKeyFile &quot;C:/Program Files/Apache Software Foundation/Apache2.4/conf/server.key&quot;

	SSLCACertificateFile &quot;C:/Program Files/Apache Software Foundation/Apache2.4/conf/bundle.crt&quot;

	&lt;FilesMatch &quot;\.(cgi|shtml|phtml|php)$&quot;&gt;
		SSLOptions +StdEnvVars
	&lt;/FilesMatch&gt;
	&lt;Directory &quot;C:/Program Files/Apache Software Foundation/Apache2.4/cgi-bin&quot;&gt;
		SSLOptions +StdEnvVars
	&lt;/Directory&gt;

	BrowserMatch &quot;MSIE [2-5]&quot; \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

	CustomLog &quot;C:/Program Files/Apache Software Foundation/Apache2.4/logs/ssl_request.log&quot; \
          &quot;%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \&quot;%r\&quot; %b&quot;

	&lt;/VirtualHost&gt; 

TIA....!

Apache 2.4 configuration for ssl not working

Does anyone know the command to determine if OpenSSL and mod_ssl are installed on Apache2?


How to determine if OpenSSL and mod_ssl are installed on Apache2

My error.log contains:

&gt;Request exceeded the limit of 10 internal redirects due to probable configuration error. Use &#39;LimitInternalRecursion&#39; to increase the limit if necessary. Use &#39;LogLevel debug&#39; to get a backtrace.

I replaced loglevel on apache config file:

`LogLevel debug`

After restarting, I&#39;m getting the same error message without what could be called &quot;a backtrace&quot;. As I understand there should be those 10 lines of redirects generated by mod_rewrite regex.

After searching all over the internet I&#39;ve found plenty of explanations of loglevel and mod_rewrite, but not a word of how to make loglevel debug work.

Any ideas?

How to enable loglevel debug on Apache2 server

I&#39;m using Vagrant to run an Ubuntu powered VirtualBox with Apache2.

The webserver, among others, serves static files from my /vagrant directory.

This works well most of the time. But when I change an image on my shared folder and reload the website, the previous version of the image is served, but it&#39;s truncated. 

It works if I delete the old picture first from my shared folder, refresh the website so the picture is NOT shown, then save the new file and reload the website again.

Does anyone knew about this problem? I don&#39;t have anything special installed, just Apache 2 with mod_rewrite and PHP with Mongo, APC Plugin, MongoDB as well as nodeJS with a bunch of scripts.

Vagrant/VirtualBox/Apache2 Strange Cache Behaviour

I&#39;ve managed to extend `TokenAuthentication` and I have a working model when using the request session to store my tokens, however when I attempt to pass `Authorization` as a header parameter [as described here][1], I noticed that my Responses come back without the META variable HTTP_AUTHORIZATION. I also noticed that if I pass &quot;Authorization2&quot; as a header parameter that it is visible in the request:

    {
        &#39;_content_type&#39;: &#39;&#39;, 
        &#39;accepted_media_type&#39;: &#39;application/json&#39;, 
        &#39;_request&#39;: &lt;WSGIRequest
            path:/api/test_auth/,
            GET:&lt;QueryDict: {}&gt;,
            POST:&lt;QueryDict: {}&gt;,
            COOKIES:{
                &#39;MOD_AUTH_CAS_S&#39;: &#39;ba90237b5b6a15017f8ca1d5ef0b95c1&#39;,
                &#39;csrftoken&#39;: &#39;VswgfoOGHQmbWpCXksGUycj94XlwBwMh&#39;,
                &#39;sessionid&#39;: &#39;de1f3a8eee48730dd34f6b4d41caa210&#39;
            },
            META:{
               &#39;DOCUMENT_ROOT&#39;: &#39;/etc/apache2/htdocs&#39;,
               &#39;GATEWAY_INTERFACE&#39;: &#39;CGI/1.1&#39;,
               &#39;HTTPS&#39;: &#39;1&#39;,
               &#39;HTTP_ACCEPT&#39;: &#39;*/*&#39;,
               &#39;HTTP_ACCEPT_CHARSET&#39;: &#39;ISO-8859-1,utf-8;q=0.7,*;q=0.3&#39;,
               &#39;HTTP_ACCEPT_ENCODING&#39;: &#39;gzip,deflate,sdch&#39;,
               &#39;HTTP_ACCEPT_LANGUAGE&#39;: &#39;en-US,en;q=0.8&#39;,
               &#39;HTTP_AUTHORIZATION2&#39;: &#39;Token 9944b09199c62bcf9418ad846dd0e4bbdfc6ee4c&#39;,
               ...

My first guess is that the authorization header is being removed by apache, and I have read a few S/O questions that state that apache will throw out the value if it does not match basic authorization and authenticate, but I have no idea how to allow the Authorization header to &#39;pass through&#39; to Django and the WSGIRequest. Does anyone know how to solve this problem?

I also use mod_auth_cas and mod_proxy, if that changes anything..

  [1]: http://django-rest-framework.org/api-guide/authentication.html#custom-authentication

Authorization header missing in django rest_framework, is apache to blame?

It&#39;s an important security issue and I&#39;m sure this should be possible.

A simple example:

You run a community portal. Users are registered and upload their pictures.
Your application gives security rules whenever a picture is allowed to be displayed. For example users must be friends on each sides by the system, in order that you can view someone else&#39;s uploaded pictures.

Here comes the problem: it is possible that someone crawls the image directories of your server. But you want to protect your users from such attacks.

If it&#39;s possible to put the binary data of an image directly into the HTML markup, you can restrict the user access of your image dirs to the user and group your web application runs of and pass the image data to your Apache user and group directly in the HTML.

The only possible weakness then is the password of the user that your web app runs as.

Is there already a possibility?

Is it possible to put binary image data into html markup and then get the image displayed as usual in any browser?

I want to host several sites with under the same server which uses Debian 5, say I have `site1`, `site2` and `site3`, and assume my ip is `155.55.55.1`:

    site1: 155.55.55.1:80  , script at /opt/django/site1/
    site2: 155.55.55.1:8080, script at /opt/django/site2/
    site3: 155.55.55.1:8090, script at /opt/django/site3/

Here is my apache default: 


    &lt;VirtualHost *:80&gt;
        ServerName /
        ServerAlias  */
        DocumentRoot /opt/django/site1/
        LogLevel warn
        WSGIScriptAlias / /opt/django/site1/apache/django.wsgi
        Alias /media /opt/django/site1/media/statics
        Alias /admin_media  /home/myuser/Django-1.1/django/contrib/admin/media 
    &lt;/VirtualHost&gt;
    
    &lt;VirtualHost *:80&gt;
        DocumentRoot &quot;/usr/share/phpmyadmin&quot;
        ServerName /phpmyadmin
        Alias /phpmyadmin /usr/share/phpmyadmin
        &lt;Directory /usr/share/phpmyadmin&gt;
            Options Indexes FollowSymLinks
            AllowOverride None
            Order Deny,Allow
            Allow from all
        &lt;/Directory&gt;
    &lt;/VirtualHost&gt;

And here is my wsgi config for `site1`, at `/opt/django/site1/apache/django.wsgi`:

    import os, sys
    import django.core.handlers.wsgi
    
    sys.path.append(&#39;/opt/django&#39;)
    sys.path.append(&#39;/opt/django/site1&#39;)
    
    os.environ[&#39;DJANGO_SETTINGS_MODULE&#39;] = &#39;site1.settings&#39;
    application = django.core.handlers.wsgi.WSGIHandler()

How can I add `site2` and `site3`, which are Django-based sites and will be served like `site1`?

multiple django sites with apache &amp; mod_wsgi

I&#39;m new to PHP and the whole LAMP stack but I&#39;ve managed to get it up and running on my Ubuntu 10.10 system. Everything seems to be working with the exception of error reposting in the browser which I just can&#39;t seem to get working (and which I can&#39;t work without!).

I&#39;ve read a number of article and other threads which indicate that the following values should be applied in the file `/etc/php5/apache2/php.ini`:

 - `display_errors = On`
 - `display_startup_errors = On`

I&#39;ve restarted apache2 and even restarted my computer but for the life of me I just can&#39;t get it working. I&#39;ve even tried using `phpinfo()` function which reports that these settings are as I&#39;ve set them so I know it&#39;s picking up the correct configuration file but nothing!

Any help would be welcome.

PHP errors NOT being displayed in the browser [Ubuntu 10.10]

I wanted to reverse proxy a web service from my tomcat server using apache web server. I have modified the httpd.conf 

    LoadModule proxy_module modules/mod_proxy.so

    &lt;Directory /&gt;
        AllowOverride none
        Require all denied
    &lt;/Directory&gt;

    ProxyPass         /ROOT  http://localhost:8080/ROOT
    ProxyPassReverse  /ROOT  http://localhost:8080/ROOT


My Tomcat server runs on port 8080, now when I run localhost/ROOT, I get error 500 internal server error.

This last entry in the `error_log` is:
&lt;PRE&gt;
[Thu Jul 04 14:17:00.097359 2013] [proxy:warn] [pid 18980:tid 4476780544] [client 127.0.0.1:50525] AH01144: No protocol handler was valid for the URL /ROOT. If you are using a DSO version of mod_proxy, make sure the proxy submodules are included in the configuration using LoadModule.
&lt;/PRE&gt;
The last entry in the `access_log` is:
&lt;PRE&gt;
 127.0.0.1 - - [04/Jul/2013:14:17:00 -0400] &quot;GET /ROOT HTTP/1.1&quot; 500 528
&lt;/PRE&gt;

Any idea on what I am doing wrong here?

Setup mod_proxy on apache http server

I have a highly trafficked application on one debian machine and apache has started acting strange. 

Every time I start apache, tons of apache processes are spawned, the app doesn&#39;t load at all, and very quickly the whole machine freezes and must be powercycled to reboot.


Here is what I get for top immediately after starting apache:
&lt;pre&gt;
top -   20:14:44    up         1:16,      2 users,    load average: 0.48, 0.10, 0.03
Tasks:  330 total,  5 running, 325 sleeping,   0 stopped,   0 zombie
Cpu(s): 12.0%us,    21.4%sy,   0.0%ni,        65.7%id,   0.2%wa,  0.1%hi,  0.7%si,  0.0%st
Mem:    8179920k    total,     404984k used,  7774936k free,    60716k buffers
Swap:   2097136k    total,     0k used,       2097136k free,    43424k cached


10251 www-data  15   0  467m 8100 4016 S    6  0.1   0:00.04 apache2
10262 www-data  15   0  467m 8092 4012 S    6  0.1   0:00.05 apache2
10360 www-data  15   0  468m 8296 4016 S    6  0.1   0:00.05 apache2
10428 www-data  15   0  468m 8272 3992 S    6  0.1   0:00.05 apache2
10241 www-data  15   0  467m 8256 4012 S    4  0.1   0:00.03 apache2
10259 www-data  15   0  467m 8092 4012 S    4  0.1   0:00.04 apache2
10274 www-data  15   0  467m 8056 4012 S    4  0.1   0:00.03 apache2
10291 www-data  15   0  468m 8292 4012 S    4  0.1   0:00.03 apache2
10293 www-data  15   0  468m 8292 4012 S    4  0.1   0:00.03 apache2
10308 www-data  15   0  468m 8296 4016 S    4  0.1   0:00.02 apache2
10317 www-data  15   0  468m 8292 4012 S    4  0.1   0:00.02 apache2
10320 www-data  15   0  468m 8292 4012 S    4  0.1   0:00.04 apache2
10325 www-data  15   0  468m 8292 4012 S    4  0.1   0:00.04 apache2
&lt;/pre&gt;
And so forth.. with more apache2 processes.

Less than a minute later, you can see below that the load has gone from 0.48 to 2.17. If I do not stop apache at this point, the load continues to rise over a few minutes or less until the machine dies.
&lt;pre&gt;
top -    20:15:34 up 1:17,       2 users,  load average: 2.17, 0.62, 0.21
Tasks:   1850 total,  5 running, 1845 sleeping,   0 stopped,   0 zombie
Cpu(s):  0.3%us,      2.1%sy,    0.0%ni, 96.4%id,  0.0%wa,  0.1%hi,  1.0%si,  0.0%st
Mem:     8179920k     total,     1938524k used,  6241396k free,    60860k buffers
Swap:    2097136k     total,     0k used,  2097136k free,    44196k cached
&lt;/pre&gt;

We have a firewall where we whitelist the addresses we know are allowed to hit our site.

Any ideas about what the problem might be are very welcome.

Thanks!



How can I prevent tons of apache processes spawning when I start apache and proceeding to kill my machine?

I have a file in my `~/Sites` directory that works fine when I browse to it through `coderama.local/~coderama/index2.php`

Now I want to get tricky and move my `index2.php` file to somewhere else on my system, so I do this by creating a symbolic link. However, when I try to access `coderama.local/~coderama/index2.php` I now get the following error.

Any ideas anyone?

Thanks!

&gt; ### Forbidden
&gt; You don&#39;t have permission to access /~coderama/index2.php on this server.

All Apache2 Solutions on Gang of Coders

Total of 37 Apache2 Solutions