.htaccess failing on mod_userdir

Hello,

I have noticed that you can access .htaccess controlled directories on my server by pointing a browser at http://mainserver.com/~user/protected-dir. Obviously mod_userdir is in use. The main server configuration says AllowOverrides None, the virtual server section for each VS is AllowOverride All.

The .htaccess works if you were to point directly at http://userdom.com/protected-dir, but fails the other way. Is this normal behavior? Would I need to set AllowOverride Limit (or something) to remedy this situation?

Regards,

Jeff

 

 

 

 

Top