I use Apache's
mod_info to display detailed information about my server setup.
# Set path below to be handled by mod_info. It will show server info. # For this to work, this module must be loaded (uncommented in httpd.conf) <Location /special/path> SetHandler server-info Order allow,deny Allow from 127.0.0.1 </Location>
Allow from is set to the local machine because this is on my dev machine.
This module allows me to see a tremendous amount of information by navigating to
/special/path. I'd like to use it on my public server but need to secure it somehow so others cannot load that path.
The docs discuss whitelisting by IP address but I have an organizational IP, shared by many.
What's the most practical way to protect this path?