order


Syntax: order ordering
Default: order deny,allow
Context: directory, .htaccess
Override: Limit
Status: Base
Module: mod_access

The order directive controls the order in which allow and deny directives are evaluated. Ordering is one of

deny,allow
the deny directives are evaluated before the allow directives. (The initial state is OK.)
allow,deny
the allow directives are evaluated before the deny directives. (The initial state is FORBIDDEN.)
mutual-failure
Only those hosts which appear on the allow list and do not appear on the deny list are granted access. (The initial state is irrelevant.)

Keywords may only be separated by a comma; no whitespace is allowed between them. Note that in all cases every allow and deny statement is evaluated, there is no "short-circuiting".

Example:

order deny,allow
deny from all
allow from .ncsa.uiuc.edu

Hosts in the ncsa.uiuc.edu domain are allowed access; all other hosts are denied access.