directives Allow, Deny pour Apache

Attention la directive Order est contre-intuitive :

• Order Allow,Deny
  1. all Allow directives are evaluated ; at least one MUST match, or the request is rejected.
  2. all Deny directives are evaluated. If any matches, the request is rejected.
  3. any requests which do not match an Allow or a Deny directive are denied by default.

  Ce qui signifie que

  1. Si ca match un Deny, quelque soit les autres directives alors reject.
  2. Si match Allow (mais aucun deny explicite alors accept.
  3. Si match rien alors reject.
• Order Deny,Allow
  1. all Deny directives are evaluated; if any match, the request is MARKED TO BE denied.
  2. if it also matches an Allow directive, the request is permitted.
  3. Any requests which do not match any Allow or Deny directives are permitted.

  Ce qui signifie que

  1. Si ca match un Allow alors accepte et on en reste là.
  2. Si match Deny (mais pas un allow précédent) alors reject.
  3. Si match rien alors accept.