From f0ef422aad5958c71ec05af374af71755fdb890d Mon Sep 17 00:00:00 2001 From: Henning Brauer Date: Fri, 19 Jul 2002 21:31:17 +0000 Subject: merge --- usr.sbin/httpd/htdocs/manual/misc/FAQ.html | 77 ++++++++++++++++++++++++++++-- 1 file changed, 72 insertions(+), 5 deletions(-) (limited to 'usr.sbin/httpd/htdocs/manual/misc') diff --git a/usr.sbin/httpd/htdocs/manual/misc/FAQ.html b/usr.sbin/httpd/htdocs/manual/misc/FAQ.html index 82ce928ba2f..8d731d68613 100644 --- a/usr.sbin/httpd/htdocs/manual/misc/FAQ.html +++ b/usr.sbin/httpd/htdocs/manual/misc/FAQ.html @@ -315,6 +315,11 @@
  • Why do I have weird entries in my logs asking for default.ida and cmd.exe?
    • + +
  • Why am I getting server restart + messages periodically, when I did not restart the + server?
    • + @@ -534,6 +539,10 @@
  • Why does Apache ask for my password twice before serving a file?
    • + +
  • How can I prevent people from + "stealing" the images from my web site?
    • + @@ -1267,10 +1276,9 @@ with Perl. We implement a simple subset of Perl's regex support, but it's still a good way to learn what they mean. You can start by going to the - CPAN page on regular expressions, and branching out - from there.

    -
    + href="http://www.perl.com/doc/manual/html/pod/perlre.html">CPAN + page on regular expressions, and branching out from + there.

  • @@ -1886,6 +1894,23 @@ with more information.

    • + Why am I getting server restart + messages periodically, when I did not restart the server? + +

    Problem: You are noticing restart messages in your error log, + periodically, when you know you did not restart the server + yourself:

    + +
    +[Thu Jun  6 04:02:01 2002] [notice] SIGHUP received.  Attempting to restart
+[Thu Jun  6 04:02:02 2002] [notice] Apache configured -- resuming normal operations
+
    + +

    Check your cron jobs to see when/if your server logs are being + rotated. Compare the time of rotation to the error menage time. + If they are the same, you can somewhat safely assume that the + restart is due to your server logs being rotated.

    + @@ -2989,6 +3014,10 @@ Options Includes ExecCGI
    +

    If you are using suexec, the first technique will not work + because CGI scripts must be stored under the public_html + directory.

    +
    @@ -3307,6 +3336,44 @@ Options Includes ExecCGI
    + +
  • + How can I prevent + people from "stealing" the images from my web site? + +

    The goal here is to prevent people from inlining your images + directly from their web site, but accessing them only if they + appear inline in your pages.

    + +

    This can be accomplished with a combination of SetEnvIf and + the Deny and Allow directives. However, it is important to + understand that any access restriction based on the REFERER + header is intrinsically problematic due to the fact that + browsers can send an incorrect REFERER, either because they + want to circumvent your restriction or simply because they don't + send the right thing (or anything at all).

    + +

    The following configuration will produce the desired effect + if the browser passes correct REFERER headers.

    + +
    +SetEnvIf REFERER "www\.mydomain\.com" linked_from_here
+SetEnvIf REFERER "^$" linked_from_here
+
+<Directory /www/images>
+    Order deny,allow
+    Deny from all
+    Allow from env=linked_from_here
+</Directory>
+
    + +

    Further examples can be found in the Environment Variables documentation.

    + +
    +
    • + + @@ -3631,7 +3698,7 @@ Options Includes ExecCGI
    A more sophisticated solution of a logfile rotation utility is available under the name cronolog from Andrew Ford's site at http://www.ford-mason.co.uk/resources/cronolog/. + href="http://www.cronolog.org/">http://www.cronolog.org/. It can automatically create logfile subdirectories based on time and date, and can have a constant symlink point to the rotating logfiles. (As of version 1.6.1, cronolog is -- cgit v1.2.3