Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED AllowOveride None to Home Directories

Discussion in 'EasyApache' started by ItsMattSon, Nov 8, 2016.

Tags:
  1. ItsMattSon

    ItsMattSon Well-Known Member

    Joined:
    Sep 5, 2016
    Messages:
    167
    Likes Received:
    34
    Trophy Points:
    103
    Location:
    Perth
    cPanel Access Level:
    Root Administrator
    Hi guys,

    As I understand it, this directive below (in httpd.conf) allows .htaccess in root directory and below - so everywhere?

    <Directory "/">
    AllowOverride All
    Options FollowSymLinks Indexes SymLinksIfOwnerMatch
    </Directory>

    That was already like that so I presume it's a default but I'd like to disable .htaccess for users unless explicitly allowed.

    To do it, I believe I need to make a new directory block with "/home/user" and set AllowOverride to None. But where? :p

    The Documentation for Advanced Apache Configuration has been quite helpful, so if I put it in httpd.conf and distiller the file it could work, right? But *should* it instead go in one of the Include Editor field in WHM? And if so, which one is the appropriate one?

    Apologise for the beginner question. I sift through a fair few related threads before I hassle you guys with another one.
     
    #1 ItsMattSon, Nov 8, 2016
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,145
    Likes Received:
    1,932
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    You can take the the following steps modify the entry:

    1. Copy the Apache 2.4 template for EasyApache 4 to allow for customization:

    Code:
    cp -a /var/cpanel/templates/apache2_4/ea4_main.default /var/cpanel/templates/apache2_4/ea4_main.local
    2. Edit /var/cpanel/templates/apache2_4/ea4_main.local to change the AllowOverride entry to none:

    Code:
    vi /var/cpanel/templates/apache2_4/ea4_main.local
    3. Save the changes, and then run:

    Code:
    /scripts/rebuildhttpdconf
    Let us know if this helps.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelMichael, Nov 9, 2016
  3. ItsMattSon

    ItsMattSon Well-Known Member

    Joined:
    Sep 5, 2016
    Messages:
    167
    Likes Received:
    34
    Trophy Points:
    103
    Location:
    Perth
    cPanel Access Level:
    Root Administrator
    Hi @cPanelMichael,

    The solution looked promising, but upon editing ea4_main.local and rebuilding httpd conf (definitely has changed in /usr/local/apache/conf/httpd.conf), I can still use .htaccess files in my user accounts. Shouldn't the below have disabled that?

    <Directory "/">
    AllowOverride None
    Options FollowSymLinks Indexes SymLinksIfOwnerMatch
    </Directory>
     
    #3 ItsMattSon, Nov 9, 2016
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,145
    Likes Received:
    1,932
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    Could you let us know the specific entries in your .htaccess files that are still working? Are you attempting to disable .htaccess usage completely? If so, you'd have to add an additional line under "AllowOverride None" for "AllowOverrideList". For example:

    Code:
    AllowOverrideList Redirect RedirectMatch
    The Apache documentation explains how this works at:

    core - Apache HTTP Server Version 2.4

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 cPanelMichael, Nov 10, 2016
  5. ItsMattSon

    ItsMattSon Well-Known Member

    Joined:
    Sep 5, 2016
    Messages:
    167
    Likes Received:
    34
    Trophy Points:
    103
    Location:
    Perth
    cPanel Access Level:
    Root Administrator
    Hi Michael,

    I just set "Options Includes" in .htaccess in /home/user/public_html and put an local_date SSI in my index and it showed up. Without it in htaccess though, it's disabled by default thanks to your help in another thread (unticked it in the WHM's Apache Configuration).

    I thought that AllowOverride None would prevent any overrides?

    Theoretically, I shouldn't have to completely disable .htaccess with AllowOverrideList, should I?
     
    #5 ItsMattSon, Nov 10, 2016
  6. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,145
    Likes Received:
    1,932
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Please post the output from:

    Code:
    grep AllowOverride /var/cpanel/templates/apache2_4/*
grep AllowOverride /usr/local/apache/conf/includes/*
    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #6 cPanelMichael, Nov 17, 2016
  7. ItsMattSon

    ItsMattSon Well-Known Member

    Joined:
    Sep 5, 2016
    Messages:
    167
    Likes Received:
    34
    Trophy Points:
    103
    Location:
    Perth
    cPanel Access Level:
    Root Administrator
    Thanks for replying, Michael. Here's a screenshot of the output:
     

    Attached Files:

    #7 ItsMattSon, Nov 23, 2016
  8. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,145
    Likes Received:
    1,932
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Could you open a support ticket using the link in my signature so we can take a closer look and determine why it's not working? You can post the ticket number here and I'll update this thread with the outcome.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #8 cPanelMichael, Nov 29, 2016
  9. ItsMattSon

    ItsMattSon Well-Known Member

    Joined:
    Sep 5, 2016
    Messages:
    167
    Likes Received:
    34
    Trophy Points:
    103
    Location:
    Perth
    cPanel Access Level:
    Root Administrator
    Hi @cPanelMichael,

    All sorted!

    I believe there must have been some failure in the rebuilding of the conf file (maybe on my part, not sure). The good news is that I can't seem to replicate the error anymore as of today (I hadn't actually tried since 11th Nov when I first posted the odd behavior in this thread).

    I can only assume that it was fixed when the upcp cron ran between then and now (which it does every night).

    Thanks very much for the help as always!
     
    #9 ItsMattSon, Nov 29, 2016
    cPanelMichael likes this.
  10. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,145
    Likes Received:
    1,932
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    I'm happy to see the issue is now resolved. It's working as intended on a test system as well, but feel free to let us know if you encounter any additional issues related to this topic.

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #10 cPanelMichael, Dec 2, 2016
    ItsMattSon likes this.
(You must log in or sign up to post here.)
Loading...
Similar Threads - AllowOveride None Home
  1. chris0147

    Disk usage show none on both accounts

    chris0147, Oct 22, 2018, in forum: General Discussion
    Replies:
    6
    Views:
    71
    cPanelLauren
    Oct 24, 2018
  2. Lee Wickham

    SOLVED None of the certificates in the system ssl storage were acceptable to use for the “cpanel” service.

    Lee Wickham, Sep 24, 2018, in forum: Security
    Replies:
    12
    Views:
    177
    Infopro
    Oct 18, 2018
  3. Lethe

    FTP too many connections - None listed in cPanel

    Lethe, May 16, 2018, in forum: General Discussion
    Replies:
    1
    Views:
    281
    Infopro
    May 16, 2018
  4. MaRiOsGR66

    how to disable .htaccess - AllowOverride None for 1 account only

    MaRiOsGR66, Nov 15, 2017, in forum: Workarounds and Optimization
    Replies:
    3
    Views:
    516
    cPanelMichael
    Nov 21, 2017
  5. Nick57

    None of the certificates in the system ssl storage were acceptable to use for the “cpanel” service.

    Nick57, Sep 27, 2017, in forum: Security
    Replies:
    2
    Views:
    530
    Nick57
    Sep 27, 2017

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice