I have a password protected site and am trying to resolve a specific url so that it works for a payment callback. The site is built using CakePHP.
It is shown below that Allow from env=allow simply not taken into account (I also tried my own IP address). The setenvif modem setenvif enabled in Apache, and other Allow lines work fine. FYI runs on Ubuntu on EC2. I also searched the site for similar problems and solutions, but to no avail.
I checked the global $_SERVER in PHP for the variable "allow" and it exists, so the idea ends. Any help would be greatly appreciated!
SetEnvIf Request_URI ^/secure_trading/callback allow=1 SetEnvIf Request_URI ^/secure_trading/callback$ allow=1 SetEnvIf Request_URI "/secure_trading/callback" allow=1 SetEnvIf Request_URI "/app/weboot/secure_trading/callback" allow=1 AuthName "Protected" AuthGroupFile /dev/null AuthType Basic AuthUserFile /var/www/domain.co.uk/.htpasswd Order deny,allow Satisfy Any Deny from all Allow from 127.0.0.1 Allow from env=allow require valid-user <IfModule mod_rewrite.c> RewriteEngine on RewriteRule ^$ app/webroot/ [L] RewriteRule (.*) app/webroot/$1 [L] </IfModule>
source share