[lug] ErrorDocument requesting in Apache

[Greg Horne]

Okay,

     So I am using my .htaccess file to allow custom error documents, like 
404, 500 and such.  In my httpd.conf I have "AllowOverride FileInfo" set.  I 
realize that this allows the .htaccess file to override httpd.conf's 
ErrorDocument requests, but also AddEncoding, AddLanguage, AddType, 
DefaultType,and LanguagePriority.  Does this pose any security risks?  If 
so, how can I make it so the .htaccess can ONLY be used to set-up custom 
error message handlers?

Greg Horne

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp