Movatterモバイル変換


[0]ホーム

URL:


Modules |Directives |FAQ |Glossary |Sitemap

Apache HTTP Server Version 2.4

<-
Apache >HTTP Server >Documentation >Version 2.4 >Modules

Apache Module mod_userdir

Available Languages: en  | fr  | ja  | ko  | tr 

Description:User-specific directories
Status:Base
Module Identifier:userdir_module
Source File:mod_userdir.c

Summary

By using this module you are allowing multiple usersto host content within the same origin. The same origin policy is a keyprinciple of Javascript and web security. By hosting web pages in the sameorigin these pages can read and control each other and security issues inone page may affect another. This is particularly dangerous in combinationwith web pages involving dynamic content and authentication and whenyour users don't necessarily trust each other.

This module allows user-specific directories to be accessed using thehttp://example.com/~user/ syntax.

Support Apache!

Directives

Bugfix checklist

See also

top

UserDirDirective

Description:Location of the user-specific directories
Syntax:UserDirdirectory-filename [directory-filename] ...
Context:server config, virtual host
Status:Base
Module:mod_userdir

TheUserDir directive sets the real directory in a user's home directory to use when a request for a document for a user is received.Directory-filename is one of the following:

If neither theenabled nor thedisabled keywords appear in theUserdir directive, the argument is treated as a filename pattern, and is used to turn the name into a directory specification. A request forhttp://www.example.com/~bob/one/two.html will be translated to:

UserDir directive usedTranslated path
UserDir public_html~bob/public_html/one/two.html
UserDir /usr/web/usr/web/bob/one/two.html
UserDir /home/*/www/home/bob/www/one/two.html

The following directives will send redirects to the client:

UserDir directive usedTranslated path
UserDir http://www.example.com/usershttp://www.example.com/users/bob/one/two.html
UserDir http://www.example.com/*/usrhttp://www.example.com/bob/usr/one/two.html
UserDir http://www.example.com/~*/http://www.example.com/~bob/one/two.html
Be careful when using this directive; for instance,"UserDir ./" would map"/~root" to"/" - which is probably undesirable. It is strongly recommended that your configuration include a "UserDir disabled root" declaration. See also theDirectory directive and theSecurity Tips page for more information.

Additional examples:

To allow a few users to haveUserDir directories, but not anyone else, use the following:

UserDir disabledUserDir enabled user1 user2 user3

To allow most users to haveUserDir directories, but deny this to a few, use the following:

UserDir disabled user4 user5 user6

It is also possible to specify alternative user directories. If you use a command like:

UserDir "public_html" "/usr/web" "http://www.example.com/"

With a request forhttp://www.example.com/~bob/one/two.html, will try to find the page at~bob/public_html/one/two.html first, then/usr/web/bob/one/two.html, and finally it will send a redirect tohttp://www.example.com/bob/one/two.html.

If you add a redirect, it must be the last alternative in the list. Apache httpd cannot determine if the redirect succeeded or not, so if you have the redirect earlier in the list, that will always be the alternative that is used.

User directory substitution is not active by default in versions 2.1.4 and later. In earlier versions,UserDir public_html was assumed if noUserDir directive was present.

Merging details

Lists of specific enabled and disabled users are replaced, not merged, from global to virtual host scope

See also

Available Languages: en  | fr  | ja  | ko  | tr 

top

Comments

Notice:
This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Libera.chat, or sent to ourmailing lists.

Copyright 2025 The Apache Software Foundation.
Licensed under theApache License, Version 2.0.

Modules |Directives |FAQ |Glossary |Sitemap


[8]ページ先頭

©2009-2025 Movatter.jp