Apache giving 403 forbidden errors

Check that : Apache can physically access the file (the user that run apache, probably www-data or apache, can access the file in the filesystem) Apache can list the content of the folder (read permission) Apache has a “Allow” directive for that folder. There should be one for /var/www/, you can check default vhost for … Read more

Adding VirtualHost fails: Access Forbidden Error 403 (XAMPP) (Windows 7)

Okay: This is what I did now and it’s solved: My httpd-vhosts.conf looks like this now: <VirtualHost dropbox.local:80> DocumentRoot “E:/Documenten/Dropbox/Dropbox/dummy-htdocs” ServerName dropbox.local ErrorLog “logs/dropbox.local-error.log” CustomLog “logs/dropbox.local-access.log” combined <Directory “E:/Documenten/Dropbox/Dropbox/dummy-htdocs”> # AllowOverride All # Deprecated # Order Allow,Deny # Deprecated # Allow from all # Deprecated # –New way of doing it Require all granted </Directory> … Read more

How to prevent PHP sessions being shared between different apache vhosts?

Edit is also the reason why you ALWAYS should set your session_save_path ( http://php.net/manual/en/function.session-save-path.php ) or use database session handling ( http://php.net/manual/en/class.sessionhandler.php ) if you are on an shared webhosting. Somebody can create an session id on there site and chmod it to 777 and use that session id on your site to bypass logins/or … Read more