coldtobi's blog

• Main
• Archives
• Albums
• Links
• Admin

• Blog and Website [94]
• DSL RAM [2]
• Electronics and Atmel AVR [11]
• fanctrl [3]
• General [8]
• German [1]
• La Fonera [22]
• Lifetype [17]
• Linux / Debian [33]
• Monetizing A Blog [8]
• my 2 cents [15]
• Netzfunde [18]
• Nice Links [1]
• solarpowerlog [2]
• Thecus N2100 [16]
• Tips and Tricks [18]

• N2M: parallel build dpkg-buildpackage and pdebuild
• Windows CE: Assertion failed in wincore.cpp line 1034
• CakePHP: Baking a Application in Minutes
• Enabling InnoDB support in debian (MySQL)
• Flattr.
• Pollin Net-IO PHP Library
• Link to safe

• RSS 0.90
• RSS 1.0
• RSS 2.0
• Atom

• Privacy Policy
• Disclosure Policy

Configure lighttp to simulate .htaccess rules (Deny From All)

Unfortunatly, lighhtpd does not support ".htaccess" rules directly. So if you want to use a script targeted for Apache, you have to implement your own rules.

Luckily, the most needed rule is to forbid the serving of a whole directory, the "Deny From All" rule.

This one can be emulated within the lighttpd.con -- but you have to list every affected directory.  A tedious task to find out every .htaccess contianing the rule and then adding the path to the configuration.

But this can be automated:

#!/bin/bash

# run this script in the base directory of the web content

# give a parameter the mapping to the webroot, eg.
# if it is running under localhost/xyz/, say "/xyz/"

found=$(find -name ".htaccess" )
echo $found >&2

for files in $found
do
        f=$(echo $files |  sed -e "s/^\.\///"  -e "s/\.htaccess$//g" )
        cat $files | grep -i "Deny" | grep -i "from" | grep -i -L "All" 
        if [[ $? -eq 0 ]]
        then
                echo '# Detected deny from all in ' $files
                echo '$HTTP["url"] =~ "^'$1/$f'" {'
                echo -e "\\turl.access-deny = (\"\") \\n}"
        fi
done

Invoke this script in the root directory of your apache-flavoured webscript, giving it a parameter what the "webprefix" of the directory is.

For example, if your script is located in /usr/share/squirellmail, the url is "http://<host>/squirrel execute it in  /usr/share/squirellmail with the parameter "squirrel"

The output of the script can be directly appended to the lighttpd.conf (e.g piping it with >>)

(Note: Always check the result before applying it! The script might not find all files to block, or failing to parse more complicated rules!)