Maddy wrote: > > You only need "order allow,deny" (or the other way around) if you > are going to use both. Thanks for clarifying that. > <Limit GET> > deny from all > </Limit> > > is what works on the domains/sites I've handled. Is there any reason to place the "deny from all" directive within the <limit> section, and with that restrict the effect of it to the GET method? Why not just: deny from all / Gunnar