# How can I use Apache to serve static content for a RoR app when I have only .htaccess access (and c **URL:** \ **Category:** Rails\ **Created:** [September 23, 2009, 11:56am UTC](https://www.ruby-forum.com/t/how-can-i-use-apache-to-serve-static-content-for-a-ror-app-when-i-have-only-htaccess-access-and-c/175989 "2009-09-23T11:56:49Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![greg](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/g/71c47a/32.png) [@greg](https://www.ruby-forum.com/u/greg)\ **Post date:** [September 23, 2009, 11:56am UTC](https://www.ruby-forum.com/t/how-can-i-use-apache-to-serve-static-content-for-a-ror-app-when-i-have-only-htaccess-access-and-c/175989/1 "2009-09-23T11:56:49Z")
Hi, Are there any Rails/Apache guru’s that might know if it’s possible (and how) to have the ability for users to upload their content to my RoR application but then subsequent access to such static content would be: a) served by APACHE web server [to avoid the overhead of going via Rails], but b) still want to have an authentication/authorisation check to occur before they can access the content The constraint is I’m on [http://dreamhost.com/](http://dreamhost.com/) shared platform where I have only access to the Apache .htaccess file and I can’t add my own Apache modules. [http://wiki.dreamhost.com/Apache](http://wiki.dreamhost.com/Apache) [http://wiki.dreamhost.com/Htaccess](http://wiki.dreamhost.com/Htaccess) [http://wiki.dreamhost.com/KB\_/\_Unix\_/\_.htaccess\_files](http://wiki.dreamhost.com/KB_/_Unix_/_.htaccess_files) thanks ---
**Author:** ![greg](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/g/71c47a/32.png) [@greg](https://www.ruby-forum.com/u/greg)\ **Post date:** [September 24, 2009, 10:53pm UTC](https://www.ruby-forum.com/t/how-can-i-use-apache-to-serve-static-content-for-a-ror-app-when-i-have-only-htaccess-access-and-c/175989/2 "2009-09-24T22:53:55Z")
(bump - still really interested in response if someone is knowable in this area) 2009/9/23 Greg H. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid): > occur before they can access the content > > thanks – Greg [http://blog.gregnet.org/](http://blog.gregnet.org/) ---
**Author:** ![greg](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/g/71c47a/32.png) [@greg](https://www.ruby-forum.com/u/greg)\ **Post date:** [September 25, 2009, 6:24pm UTC](https://www.ruby-forum.com/t/how-can-i-use-apache-to-serve-static-content-for-a-ror-app-when-i-have-only-htaccess-access-and-c/175989/3 "2009-09-25T18:24:12Z")
Greg, It sounds like you have a contradicting desire here. You say you want the uploads to be served directly by the Apache server (so you don’t have Rails touching it), but you still want some form of authentication to make sure people can access it (which I imagine is what your Rails app is doing). The overhead from processing a Rails request is quite minimal, especially is you’re just doing some sort of user authentication and not some complex query/data gathering. My recommendation would be to use something like Paperclip ([http://www.thoughtbot.com/projects/](http://www.thoughtbot.com/projects/) paperclip) to help you upload files to your webserver, but protect access by serving the files through a Rails controller (something like this: [http://www.therailsway.com/2009/2/22/file-downloads-done-right](http://www.therailsway.com/2009/2/22/file-downloads-done-right)). And again, if you’re really, really concerned about your server overhead (like you’ll be getting tens of thousands of requests per hour), you can always move some of this logic into Rails Metal to decrease the overhead, but, again, it’s unlikely that you’ll need to do so. -Casey On Sep 24, 4:52 pm, Greg H. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) ---
**Author:** ![greg](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/g/71c47a/32.png) [@greg](https://www.ruby-forum.com/u/greg)\ **Post date:** [September 25, 2009, 7:54pm UTC](https://www.ruby-forum.com/t/how-can-i-use-apache-to-serve-static-content-for-a-ror-app-when-i-have-only-htaccess-access-and-c/175989/4 "2009-09-25T19:54:56Z")
thanks Casey - you no doubt correct 🙂 I’ll run with your suggested ‘don’t over-engineer’ concept… 2009/9/25 daphonz [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid): > especially is you’re just doing some sort of user authentication and > do so. > > > > Rails], but > > > > > thanks > > > > – > > Greghttp://blog.gregnet.org/ > > > – Greg [http://blog.gregnet.org/](http://blog.gregnet.org/) ---
**Author:** ![greg](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/g/71c47a/32.png) [@greg](https://www.ruby-forum.com/u/greg)\ **Post date:** [September 25, 2009, 8:48pm UTC](https://www.ruby-forum.com/t/how-can-i-use-apache-to-serve-static-content-for-a-ror-app-when-i-have-only-htaccess-access-and-c/175989/5 "2009-09-25T20:48:12Z")
Note that the X-Sendfile method in the linked article is only supported by an Apache module, which doesn’t appear to be installed on the default DH config. So you’re back where you started… I’d recommend contacting DH support - I’ve never worked with them, but the support at Site5 has always been willing to install gems / Apache modules that were standard. –Matt J. On Sep 25, 1:53 pm, Greg H. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) ---
**Author:** ![greg](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/g/71c47a/32.png) [@greg](https://www.ruby-forum.com/u/greg)\ **Post date:** [September 25, 2009, 11:42pm UTC](https://www.ruby-forum.com/t/how-can-i-use-apache-to-serve-static-content-for-a-ror-app-when-i-have-only-htaccess-access-and-c/175989/6 "2009-09-25T23:42:03Z")
thanks Matt 2009/9/26 Matt J. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid): > > > The overhead from processing a Rails request is quite minimal, > > > decrease the overhead, but, again, it’s unlikely that you’ll need to > > > > > > > > Hi, > > > > > > – > > > > Greghttp://blog.gregnet.org/ > > > > – > > Greghttp://blog.gregnet.org/ – Greg [http://blog.gregnet.org/](http://blog.gregnet.org/)