Modules |Directives |FAQ |Glossary |Sitemap
Apache HTTP Server Version 2.4
| Description: | Easily restrict what HTTP methods can be used on the server |
|---|---|
| Status: | Experimental |
| Module Identifier: | allowmethods_module |
| Source File: | mod_allowmethods.c |
| Compatibility: | Available in Apache 2.3 and later |
This module makes it easy to restrict what HTTP methods can beused on a server. The most common configuration would be:
<Location "/"> AllowMethods GET POST OPTIONS</Location>
| Description: | Restrict access to the listed HTTP methods |
|---|---|
| Syntax: | AllowMethods reset|HTTP-method[HTTP-method]... |
| Default: | AllowMethods reset |
| Context: | directory |
| Status: | Experimental |
| Module: | mod_allowmethods |
The HTTP-methods are case sensitive and are generally, as perRFC, given in upper case. The GET and HEAD methods are treated asequivalent. Thereset keyword can be used toturn offmod_allowmethods in a deeper nested context:
<Location "/svn"> AllowMethods reset</Location>
The TRACE method cannot be denied by this module; useTraceEnable instead.
mod_allowmethods was written to replace the ratherkludgy implementation ofLimit andLimitExcept.
Copyright 2025 The Apache Software Foundation.
Licensed under theApache License, Version 2.0.
