enforcing access is via urlbase

[bugzilla at glob.com.au]

> > Other than that, I think it's probably a fine idea. Of course, it
> > really belongs in the .htaccess file as a RewriteRule, or something like
> > that. It's a doc note, I think, as part of the installation guide, more
> > than an option in Bugzilla.

RewriteRule is ok, as long as you remember to exclude files such as
robots.txt.

> Another point is that if the end-user is using HTTP/1.0 to access 
> Bugzilla, then there is no way for Bugzilla to know which hostname they 
> used. (although we can certainly tell if they're using SSL or not)

ah.  i'd forgotten about that.  that would be a show stopper.


/me shelfs idea

begin-base64 644 signature.gif
R0lGODlhbQAHAIAAAABPo////ywAAAAAbQAHAAACfAxuGAnch+Bibkn7FL1p
XgVl4Ig1jjlZRoqybgun2Cur5uOunq7u/Ipq7WIyIc7XG9JquEgumPzdlhTf
h0O83kDJaXEm8mRHwXKJy5sac7qYOpT+gtv0n+0ujQOfdqh16caWt0foBViH
N1PRMXimiLUGt3ElVimlgbllWAAAOw==
====