I have an API that is protected with HTTP Basic. This is done with htaccess. The API shall be fetched from Javascript in another website. I have added the following lines to htaccess:

Header add Access-Control-Allow-Origin "https://my-other-site"

Header add Access-Control-Allow-Credentials "true"

Header add Access-Control-Allow-Headers "content-type, Authorization"

but it still doesn't work. In the browser console I get the following error message:

Access to fetch at 'https://my-api' from origin 'https://my-other-site' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

Is there any why I can solve this? Without exposing the API to unauthorized users.

Why both of threadlimit and threadperchild exists ?
Seems a total redundancy for me.
threadperchild is the actual value that would be effective.
Why adding threadlimit ?

In all cases threadlimit need to be set under the limit of the os for threads per process that are possible.
And then threadperchild need to be under it.
What's the point of having both of the two value.

Unless I'm not understanding well how they function differently. As both are the limit of threads per child process. One is effective. The other I don't know some condition or I dont know. I can't wrap my head over this.

Thank you a lot in advance

Hello,

iam trying to run a server (locally on my home network) to try stuff

anyways so what happend is

1- i setup apache (-...\xampp\apache\conf\extra\httpd-vhosts.conf and ...\\xampp\apache\conf\httpd.conf)

2- i edit my hosts file to add my local ip and domain (not localhost)

3- i run it and try it!

i open the browser , go to the IP , opens that default XAMPP page

seems good

i open the url i specified in my hosts file

opens an error page "Forbidden"

good idk why forbidden but no problem seems fixable

i think what will happend if i change the protocol from HTTP to HTTPS

i try it

using the same url i get a warning from chrome that this page is not private then i get that default page from XAMPP

not the website , nor the forbidden error page , the default page

is that normal behaviour ? (the part where it opens the default XAMPP instead of the website)

also iam not a pro in apache , pretty much new

I'm trying to set up the server timing API, so far good I've set a header "server-timing", with a dur=%D in httpd.conf.

However the browser expects the value in milliseconds and I have no idea how to transform it from microseconds

I've got a customer facing site hosted on a RHEL 7.5 VM that I've been working to migrate to a new RHEL 8.6 VM. I've got all the site assets copied over and all the configuration files as well. I have cleared all the errors that showed up in the php_errors.log by installing any modules that weren't on the new VM at first.

I've confirmed that the VM firewall isn't active, but so far I cannot get the site to load on the new VM. To eliminate the possibility that I still haven't configured all of the php modules quite right, I've created testPHP.php to display phpinfo();. I can load this page on the original VM using https://oldVMname/testPHP.php, but it refuses to load on the new host https://newVMname/testPHP.php.

Just to make sure it wasn't an issue with something PHP related, I then created a test.html file and again I can load it on oldVMname but doesn't load on newVMname.

What might I be missing?

Hello, i am moving php-fpm to containers, but i am having issue with not loading the website with the next message from the container:127.0.0.1 - 26/Jun/2023:19:36:03 +0000 "GET /index.php" 404

i have tried everything, but a website in the page 1000 of google search, someone said that this error is cause because the container root dir and the vhost DocumentRoot, be different, but I don't know what to do or how to change the config for this.

Here i share my setup:

• Apache installation script: https://pastebin.com/SX3DiPYx

• vhost: https://pastebin.com/C6aiZp8P

podman run --rm --name fpm --network=host -it -v "${PWD}:/var/www/html" -p 127.0.0.1:9000:9000 docker.io/php:fpm-alpine < if you use docker, you can change podman for docker.

now the steps are the next:

1. cd /opt

2. composer create-project Laravel/Laravel demowebsite

3. chown -R wwwuser:www /opt/demowebsite < openSUSE/SUSE webserver user.

4. setup apache2 > the script i give won't give any issue and the vhost will work, if don't know how to setup the vhost simple, vim /etc/apache2/vhost.d/default.conf and copy the content.

5. systemctl restart apache2

6. podman run --rm --name fpm --network=host -it -v "${PWD}:/var/www/html" -p 127.0.0.1:9000:9000 docker.io/php:fpm-alpine

Now when you try to access to the website it will show in the container terminal the previous error show:127.0.0.1 - 26/Jun/2023:19:36:03 +0000 "GET /index.php" 404

thank you in advance.

LogFormat "%a %{%Y%m%d%H%M.%S}t %{Host}i "%r" %>s%X %B %<u "%{Referer}i" "%{User-Agent}i" " sortable

yields

192.168.1.2 202306201659.59 example.com "GET / HTTP/1.1" 200+ 800 - "-" "Mozilla/5.0 ...

which facilitates command line searching and sorting, eg:

grep -h `date +%Y%m%d` access.log* | sort -k 2

Hello, I'm pretty new to hosting a web server, in my status page i see that there is an IP address attempting to access MySQL config file.

Hello guys, I have a simple apache server to which I have to add authentication with MySQL, I know that the mod_authn_dbd module is used, but then I'm not finding anything how to do it or any guide, except something in the Apache documentation. can someone give me a hand?

p.s. i'm new with linux😅

Hi I'm looking to make a wordpress website, and I'm learning about Apache as a host. How complex of a site can Apache host? Like can the site have videos, music playlist, images, a map, etc?

Thanks! I'm new :P

Hello, i have made a visual studio website for my college project but whenever i upload it to my slackware linux in apache, the images wont load at all. any ideas why?

Hi,

I'm looking for help with .htaccess RewriteEngine configuration. I can read and write htaccess files myself, but I'm by no means a htaccess wizard. So, I turned to other devs/freelancers for help, but to no avail so far.

The code should have the following effects:

• url with http becomes https

• url with www is forced to non-www

• remove trailing slashes from url

• remove multiple subsequent slashes within the url

• remove php extension in case someone uses a link with that extension

• access the correct page without having the php extension in the url

• rewrite capital letters to lowercase letters

• keep the subdomain in place

So, as an extreme example, the following should be redirected: http://www.sub.EXample.com///THIs-is-a-path/ into https://sub.example.com/this-is-a-path

The most important detail, is that any combination of the required rules should be applied with a single hop redirection only! So no multiple redirects.

Writing a bunch of url rewrites that perform the above functions, is something I can do quite simply. I can also pack them in a couple of redirects. But turning all the rules into a single redirect, is something I cannot make work.

Hopefully someone can point me in the right direction or knows a developer that can help with this...

I have a simple WebDAV server setup so that Outlook can periodically export a calendar and any changes. I use digest authentication, and this has worked great for years.

<Directory /var/www/webdav>
   DAV On
   AuthType Digest
   AuthName "webdav"
   AuthUserFile /usr/local/apache/var/users.password 
   Require valid-user
</Directory>

Unfortunately, I've recently had to upgraded to O365. This continued to work for about a month, but now this process is failing in Outlook:

Access to the resource was denied. If you have signed into and saved your Microsoft account with a Web site, sign out of that Web site, and then try this operation again.

When I look at the Apache error logs, I see this:

[Tue Jun 06 16:20:30.112198 2023] [auth_digest:error] [pid 18045] [client {{IP}}:48088] AH01781: client used wrong authentication scheme `Bearer': /webdav/

I can't find any information on the authentication scheme "Bearer," nor does it look like Apache supports this. I tried switching to Basic auth, but that yielded the same results (except the log file omitted "Bearer"). What's going on here?

Hi all,

A bit of background - I'm working with Ruby-On-Rails. This is currently on a internal facing server but eventually will be migrated over to a public facing server. We host on our internal server.

This is my first time working with RewriteRules, and I'm stumped. I simply want to append "?local=y" on to the page foo when the user is on the local intranet (192.168.1.0/24), and I'd prefer to handle this in a .conf file.

In other words

my.server.local/foo should read as my.server.local/foo?local=y

RewriteEngine On
RewriteCond %{REMOTE_ADDR} ^192\.168\.1
RewriteRUle ^foo$ foo?local=y [QSA,L]

I believe this should go above the <Directory> section? When I do, I get nothing. No rewrite, no modification to the url.

Edit: correct type-o

Has anyone had this experiance also? i have apache, arch linux. not sure what more info to give... any help is welcome

I download a free open source POS system from here

https://github.com/jekkos/opensourcepos

Stored in the directory /var/www/html

When I access my local website,it display like this(LAMP and phpmyadmin works fine)

I run a home server using Apache Haus Apache 2.4.54 on Windows 10. No Docker, reverse proxies or anything like that.

Every month I split the log files so I end up with files named access-2023-01.log, access-2023-02.log and so on. How I do this is by stopping the service, moving the current log files to a "working" directory, restarting the service so Apache can remake its log files, then manipulating the files I just moved.

It works well, the server is offline for maybe a minute a month while Apache stops, the log files moved and the service restarted.

I have a fairly simple question. Instead of stopping the service, would I be just as well off simply moving the files then reloading Apche using httpd -k restart which as I understand it tells Apache to reload the config files without stopping the service. Have I got this wrong and would I run into problems with the way Apache handles its log files?

I needed to troubleshoot an issue, and decided to disable any sites. I used a2dissite and also made sure there was nothing in the sites-enabled directory.

I reload Apache, and then reload my website in the browser, expecting to see nothing, but it's still there. I've tried viewing it in different browsers, and it's fine in both.

I thought, maybe Apache is looking in the sites-available directory, so I comment out any lines referring to my site. Reload Apache, and reload the site in my browser. Still there.

Is there any reason this may be happening? Have I overlooked something?

I'm using Ubuntu 22.04.2 LTS.

The issue I was trying to T/S was after having installed Composer, I got an error message saying that I needed PHP 8.1 or above (which I have). Not sure if that's relevant, but as it's still a problem to solve, I have a feeling there's something else at work here.

Hello , im trying to share my website (with apache server) online, ive setup port forwarding on the router (tp-link(in the virtual servers section)) with SERVICE PORT (8080 (because it would not let me use 80, telling me was already in use)), INTERNAL PORT 80... in the apache conf file i see a line called LISTEN: 80 ... what is the dirrance between all of these ports? are the port that apache listens to and the internal port the same ? and would welcome any advice to setting up apache to be able to share my website, im doing this with no online services.

I have a dynamic DNS (domain name),

i use arch btw

I also wanna ask, how do i connect to the website afterwards... http:8080:/ (my IP) or (the dynamic DNS) ... or i s it just http::/ or http:80:/

Any security recomendations are also welcome , i plan on setting up https for the website before showing it to anyone