{"id":2440,"date":"2020-11-27T04:42:45","date_gmt":"2020-11-27T04:42:45","guid":{"rendered":"https:\/\/ubiq.co\/tech-blog\/?p=2440"},"modified":"2025-08-28T04:54:20","modified_gmt":"2025-08-28T04:54:20","slug":"how-to-disable-http-options-methods-in-apache","status":"publish","type":"post","link":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/","title":{"rendered":"How To Disable HTTP OPTIONS Methods in Apache"},"content":{"rendered":"\n<p>Apache server supports a wide range of request types for all websites and apps that are running on it. They are all enabled by default. In most cases, we typically use GET and POST requests and don&#8217;t pay attention to the other types of requests. But it is important to disable insecure HTTP methods in Apache web server such as OPTIONS, HEAD, PUT, DELETE if your website does not need them. Otherwise they can lead to security vulnerabilities. In this article, we will look at how to disable HTTP OPTIONS methods in Apache. You can also use these steps to disable HEAD, PUT, DELETE methods.<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#What_is_HTTP_Options_Methods\" >What is HTTP Options Methods<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#Why_Disable_HTTP_Options_Methods\" >Why Disable HTTP Options Methods<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#How_To_Disable_HTTP_Options_Methods_in_Apache\" >How To Disable HTTP Options Methods in Apache<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#1_Using_Apache_Configuration_File\" >1. Using Apache Configuration File<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#1_Backup_Apache_Configuration_File\" >1. Backup Apache Configuration File<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#2_Disable_OPTIONS\" >2. Disable OPTIONS<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#3_Restart_Apache_Web_Server\" >3. Restart Apache Web Server<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#2_Using_htaccess_File\" >2. Using .htaccess File<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#1_Open_htaccess_file\" >1. Open htaccess file<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#2_Disable_HTTP_OPTIONS_methods\" >2. Disable HTTP OPTIONS methods<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#3_Restart_Apache_Web_Server-2\" >3. Restart Apache Web Server<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#Verify_Changes\" >Verify Changes<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#Conclusion\" >Conclusion<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_is_HTTP_Options_Methods\"><\/span>What is HTTP Options Methods<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p><a href=\"https:\/\/medium.com\/@arsh1207\/what-are-http-options-methods-2dc73615ecad\" target=\"_blank\" rel=\"noreferrer noopener\">HTTP Options<\/a> is a specific type of HTTP request generally sent by client web browsers to web servers before making an actual request. It enables browsers to get information about specific server resources without actually requesting it. For example, if a browser wants to make a cross-origin request (CORS) to a web server, it needs to send a pre-flight request, that is, an HTTP options request to check if CORS is enabled on web server or not. Generally, it is used to get permission from web server of another domain, before making requests to it.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Why_Disable_HTTP_Options_Methods\"><\/span>Why Disable HTTP Options Methods<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>In many cases, attackers can use HTTP Options methods to get information about permitted request types on your Apache server and exploit their vulnerabilities. In some cases, keeping it enabled can even expose internal server configuration details and open your server to attacks. That is why it is recommended to disable HTTP options method on your server, if you do not need it.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_To_Disable_HTTP_Options_Methods_in_Apache\"><\/span>How To Disable HTTP Options Methods in Apache<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Here are the steps to disable HTTP OPTIONS methods in Apache web server. There are two ways to solve this problem &#8211; using Apache configuration file and using .htaccess file. We will learn each of these methods one by one.<\/p>\n\n\n\n<p>Before we proceed, you can easily determine if OPTIONS is enabled on your website using the following curl command.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">$ curl \u2013i \u2013X OPTIONS https:\/\/your_ip_or_domain<br><br>HTTP\/1.1 200 OK<br>Date: Mon, 08 Oct 2018 15:14:23 GMT<br>Server: Apache<br><strong>Allow: OPTIONS,POST,GET,HEAD <\/strong><br>Content-Length: 0<br>Content-Type: text\/html<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"1_Using_Apache_Configuration_File\"><\/span>1. Using Apache Configuration File<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>In this approach, we modify Apache configuration file to directly block OPTIONS requests. <\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"1_Backup_Apache_Configuration_File\"><\/span>1. Backup Apache Configuration File<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>First step is to take a backup of Apache configuration file. It is generally located at any of the following locations, depending on your system and type of installation.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\/etc\/apache2\/httpd.conf<\/li>\n\n\n\n<li>\/etc\/apache2\/apache2.conf<\/li>\n\n\n\n<li>\/etc\/httpd\/httpd.conf<\/li>\n\n\n\n<li>\/etc\/httpd\/conf\/httpd.conf<\/li>\n<\/ol>\n\n\n\n<p>Run the following command to open it in text editor.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">$ sudo vi \/etc\/apache2\/httpd.conf<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"2_Disable_OPTIONS\"><\/span>2. Disable OPTIONS<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Add the following code to your configuration file.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">&lt;Location \/&gt;<br>    &lt;LimitExcept GET POST&gt;<br>        order deny,allow<br>        deny from all<br>    &lt;\/LimitExcept&gt;<br>&lt;\/Location&gt;<\/pre>\n\n\n\n<p>Alternatively, you can also add the following code snippet.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">&lt;Directory \/&gt;<br> AllowOverride none<br> Require all denied<br> &lt;Limit OPTIONS&gt;<br>  Order deny,allow<br>  Deny from all<br>  &lt;\/Limit&gt;<br>&lt;\/Directory&gt;<\/pre>\n\n\n\n<p>Both the above code blocks disable OPTIONS and allow only GET &amp; POST requests.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"3_Restart_Apache_Web_Server\"><\/span>3. Restart Apache Web Server<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Restart Apache web server to apply changes.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">$ sudo service apache2 restart<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"2_Using_htaccess_File\"><\/span>2. Using .htaccess File<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Often web administrators do not have access to Apache configuration file, or do not want to modify it. In such cases, you can try disabling OPTIONS via .htaccess file. In this solution, we will need to enable <em>mod_rewrite<\/em> module in Apache to disable HTTP methods.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"1_Open_htaccess_file\"><\/span>1. Open htaccess file<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Before proceeding, please enable mod_rewrite (.htaccess) in your Apache web server.<\/p>\n\n\n\n<p>Open .htaccess file, typically located at \/var\/www\/html\/.htaccess<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">$ sudo vi \/var\/www\/html\/.htaccess<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"2_Disable_HTTP_OPTIONS_methods\"><\/span>2. Disable HTTP OPTIONS methods<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Add the following lines to your <a href=\"http:\/\/www.htaccess-guide.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">.htaccess<\/a> file to disable OPTIONS, TRACE and TRACK methods.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">RewriteEngine On\nRewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK|OPTIONS) \nRewriteRule .* - [F]<\/pre>\n\n\n\n<p>In the above code, the first line tells Apache to enable mod_rewrite. The second line matches the request method with OPTIONS, TRACE and TRACK methods. The third line forbids access to all such matching methods.<\/p>\n\n\n\n<p>So, to summarize, Apache forbids access to all requests whose HTTP method is OPTIONS, TRACE or TRACK.<\/p>\n\n\n\n<p>Similarly, you can disable HEAD, PUT, DELETE methods by adding\/replacing <\/p>\n\n\n\n<pre id=\"block-d6087434-0584-41e9-acd5-4a081fd2b78c\" class=\"wp-block-preformatted\">TRACE|TRACK|OPTIONS<\/pre>\n\n\n\n<p> with other HTTP methods. Here is the configuration to disable HEAD, PUT, DELETE methods.<\/p>\n\n\n\n<pre id=\"block-d6087434-0584-41e9-acd5-4a081fd2b78c\" class=\"wp-block-preformatted\">RewriteEngine On\nRewriteCond %{REQUEST_METHOD} ^(HEAD|PUT|DELETE) \nRewriteRule .* - [F]<\/pre>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"3_Restart_Apache_Web_Server-2\"><\/span>3. Restart Apache Web Server<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Restart Apache web server to apply changes.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">$ sudo service apache2 restart<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Verify_Changes\"><\/span>Verify Changes<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>If you run curl command once again, this time the response will not contain OPTIONS. In some cases, the Allow response header itself may not be visible.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">$ curl \u2013i \u2013X OPTIONS https:\/\/your_ip_or_domain<br><br>HTTP\/1.1 200 OK<br>Date: Mon, 08 Oct 2018 15:14:23 GMT<br>Server: Apache<br><strong>Allow: POST,GET<\/strong><br>Content-Length: 0<br>Content-Type: text\/html<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span>Conclusion<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Hopefully, this article will help you disable HTTP OPTIONS method for your Apache web server. By default, all web servers allow all kinds of requests. But it is important to disable unnecessary request types on your website. Otherwise, attackers will use this doorway to sneak into your server, siphon off important information and use it exploits site vulnerabilities.<\/p>\n\n\n\n<p><a href=\"http:\/\/ubiq.co\/\">Ubiq<\/a>&nbsp;makes it easy to visualize data in minutes, and monitor in real-time dashboards.&nbsp;<a href=\"http:\/\/ubiq.co\/accounts\/register\">Try it<\/a>&nbsp;Today!<\/p>\n\n\n\n<p>Also Read : <br><a href=\"https:\/\/ubiq.co\/tech-blog\/how-to-set-default-charset-to-utf-8-encoding-in-apache-using-htaccess\/\">How to Set Default Character Set to UTF8 in Apache<\/a><br><a href=\"https:\/\/ubiq.co\/tech-blog\/how-to-change-default-timezone-in-apache-php\/\">How to Change Default Timezone<\/a><br><a href=\"https:\/\/ubiq.co\/tech-blog\/how-to-change-default-index-page-in-apache\/\">How to Change Default Index Page in Apache<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>It is important to disable insecure HTTP methods like OPTIONS, HEAD, PUT, DELETE from Apache Server. Here is how to disable HTTP options methods in Apache web server.<\/p>\n","protected":false},"author":1,"featured_media":2453,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3],"tags":[241],"class_list":["post-2440","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apache","tag-disable-http-options"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How To Disable HTTP OPTIONS Methods in Apache - Ubiq BI<\/title>\n<meta name=\"description\" content=\"It is important to disable HTTP methods like OPTIONS, HEAD, PUT, DELETE from Apache Server. Here is how to disable HTTP OPTIONS method in Apache.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How To Disable HTTP OPTIONS Methods in Apache - Ubiq BI\" \/>\n<meta property=\"og:description\" content=\"It is important to disable HTTP methods like OPTIONS, HEAD, PUT, DELETE from Apache Server. Here is how to disable HTTP OPTIONS method in Apache.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/\" \/>\n<meta property=\"og:site_name\" content=\"Ubiq BI\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ubiqbi\" \/>\n<meta property=\"article:published_time\" content=\"2020-11-27T04:42:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-28T04:54:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ubiq.co\/tech-blog\/wp-content\/uploads\/2020\/11\/disable-http-options-method-apache.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"939\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sreeram Sreenivasan\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@UbiqBI\" \/>\n<meta name=\"twitter:site\" content=\"@UbiqBI\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sreeram Sreenivasan\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/how-to-disable-http-options-methods-in-apache\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/how-to-disable-http-options-methods-in-apache\\\/\"},\"author\":{\"name\":\"Sreeram Sreenivasan\",\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/#\\\/schema\\\/person\\\/db98d49a766a3a111d8510935ab90abc\"},\"headline\":\"How To Disable HTTP OPTIONS Methods in Apache\",\"datePublished\":\"2020-11-27T04:42:45+00:00\",\"dateModified\":\"2025-08-28T04:54:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/how-to-disable-http-options-methods-in-apache\\\/\"},\"wordCount\":784,\"image\":{\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/how-to-disable-http-options-methods-in-apache\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/ubiq.co\\\/tech-blog\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/disable-http-options-method-apache.jpg?fit=1200%2C939&ssl=1\",\"keywords\":[\"disable http options\"],\"articleSection\":[\"Apache\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/how-to-disable-http-options-methods-in-apache\\\/\",\"url\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/how-to-disable-http-options-methods-in-apache\\\/\",\"name\":\"How To Disable HTTP OPTIONS Methods in Apache - Ubiq BI\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/how-to-disable-http-options-methods-in-apache\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/how-to-disable-http-options-methods-in-apache\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/ubiq.co\\\/tech-blog\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/disable-http-options-method-apache.jpg?fit=1200%2C939&ssl=1\",\"datePublished\":\"2020-11-27T04:42:45+00:00\",\"dateModified\":\"2025-08-28T04:54:20+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/#\\\/schema\\\/person\\\/db98d49a766a3a111d8510935ab90abc\"},\"description\":\"It is important to disable HTTP methods like OPTIONS, HEAD, PUT, DELETE from Apache Server. Here is how to disable HTTP OPTIONS method in Apache.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/how-to-disable-http-options-methods-in-apache\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/how-to-disable-http-options-methods-in-apache\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/how-to-disable-http-options-methods-in-apache\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/ubiq.co\\\/tech-blog\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/disable-http-options-method-apache.jpg?fit=1200%2C939&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/ubiq.co\\\/tech-blog\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/disable-http-options-method-apache.jpg?fit=1200%2C939&ssl=1\",\"width\":1200,\"height\":939,\"caption\":\"disable http options method apache\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/how-to-disable-http-options-methods-in-apache\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How To Disable HTTP OPTIONS Methods in Apache\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/#website\",\"url\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/\",\"name\":\"Ubiq BI\",\"description\":\"Build dashboards &amp; reports in minutes\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/#\\\/schema\\\/person\\\/db98d49a766a3a111d8510935ab90abc\",\"name\":\"Sreeram Sreenivasan\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4b3127ed2d4bb8efb3fa0bbb52cf2efd4d0156c97fc05a503537c883e8279947?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4b3127ed2d4bb8efb3fa0bbb52cf2efd4d0156c97fc05a503537c883e8279947?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4b3127ed2d4bb8efb3fa0bbb52cf2efd4d0156c97fc05a503537c883e8279947?s=96&d=mm&r=g\",\"caption\":\"Sreeram Sreenivasan\"},\"description\":\"Sreeram Sreenivasan is the Founder of Ubiq. He has helped many Fortune 500 companies in the areas of BI &amp; software development.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/sreeram-sreenivasan\\\/\"],\"url\":\"https:\\\/\\\/ubiq.co\\\/tech-blog\\\/author\\\/wordpress\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How To Disable HTTP OPTIONS Methods in Apache - Ubiq BI","description":"It is important to disable HTTP methods like OPTIONS, HEAD, PUT, DELETE from Apache Server. Here is how to disable HTTP OPTIONS method in Apache.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/","og_locale":"en_US","og_type":"article","og_title":"How To Disable HTTP OPTIONS Methods in Apache - Ubiq BI","og_description":"It is important to disable HTTP methods like OPTIONS, HEAD, PUT, DELETE from Apache Server. Here is how to disable HTTP OPTIONS method in Apache.","og_url":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/","og_site_name":"Ubiq BI","article_publisher":"https:\/\/www.facebook.com\/ubiqbi","article_published_time":"2020-11-27T04:42:45+00:00","article_modified_time":"2025-08-28T04:54:20+00:00","og_image":[{"width":1200,"height":939,"url":"https:\/\/ubiq.co\/tech-blog\/wp-content\/uploads\/2020\/11\/disable-http-options-method-apache.jpg","type":"image\/jpeg"}],"author":"Sreeram Sreenivasan","twitter_card":"summary_large_image","twitter_creator":"@UbiqBI","twitter_site":"@UbiqBI","twitter_misc":{"Written by":"Sreeram Sreenivasan","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#article","isPartOf":{"@id":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/"},"author":{"name":"Sreeram Sreenivasan","@id":"https:\/\/ubiq.co\/tech-blog\/#\/schema\/person\/db98d49a766a3a111d8510935ab90abc"},"headline":"How To Disable HTTP OPTIONS Methods in Apache","datePublished":"2020-11-27T04:42:45+00:00","dateModified":"2025-08-28T04:54:20+00:00","mainEntityOfPage":{"@id":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/"},"wordCount":784,"image":{"@id":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/ubiq.co\/tech-blog\/wp-content\/uploads\/2020\/11\/disable-http-options-method-apache.jpg?fit=1200%2C939&ssl=1","keywords":["disable http options"],"articleSection":["Apache"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/","url":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/","name":"How To Disable HTTP OPTIONS Methods in Apache - Ubiq BI","isPartOf":{"@id":"https:\/\/ubiq.co\/tech-blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#primaryimage"},"image":{"@id":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/ubiq.co\/tech-blog\/wp-content\/uploads\/2020\/11\/disable-http-options-method-apache.jpg?fit=1200%2C939&ssl=1","datePublished":"2020-11-27T04:42:45+00:00","dateModified":"2025-08-28T04:54:20+00:00","author":{"@id":"https:\/\/ubiq.co\/tech-blog\/#\/schema\/person\/db98d49a766a3a111d8510935ab90abc"},"description":"It is important to disable HTTP methods like OPTIONS, HEAD, PUT, DELETE from Apache Server. Here is how to disable HTTP OPTIONS method in Apache.","breadcrumb":{"@id":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#primaryimage","url":"https:\/\/i0.wp.com\/ubiq.co\/tech-blog\/wp-content\/uploads\/2020\/11\/disable-http-options-method-apache.jpg?fit=1200%2C939&ssl=1","contentUrl":"https:\/\/i0.wp.com\/ubiq.co\/tech-blog\/wp-content\/uploads\/2020\/11\/disable-http-options-method-apache.jpg?fit=1200%2C939&ssl=1","width":1200,"height":939,"caption":"disable http options method apache"},{"@type":"BreadcrumbList","@id":"https:\/\/ubiq.co\/tech-blog\/how-to-disable-http-options-methods-in-apache\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ubiq.co\/tech-blog\/"},{"@type":"ListItem","position":2,"name":"How To Disable HTTP OPTIONS Methods in Apache"}]},{"@type":"WebSite","@id":"https:\/\/ubiq.co\/tech-blog\/#website","url":"https:\/\/ubiq.co\/tech-blog\/","name":"Ubiq BI","description":"Build dashboards &amp; reports in minutes","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ubiq.co\/tech-blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/ubiq.co\/tech-blog\/#\/schema\/person\/db98d49a766a3a111d8510935ab90abc","name":"Sreeram Sreenivasan","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4b3127ed2d4bb8efb3fa0bbb52cf2efd4d0156c97fc05a503537c883e8279947?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4b3127ed2d4bb8efb3fa0bbb52cf2efd4d0156c97fc05a503537c883e8279947?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4b3127ed2d4bb8efb3fa0bbb52cf2efd4d0156c97fc05a503537c883e8279947?s=96&d=mm&r=g","caption":"Sreeram Sreenivasan"},"description":"Sreeram Sreenivasan is the Founder of Ubiq. He has helped many Fortune 500 companies in the areas of BI &amp; software development.","sameAs":["https:\/\/www.linkedin.com\/in\/sreeram-sreenivasan\/"],"url":"https:\/\/ubiq.co\/tech-blog\/author\/wordpress\/"}]}},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/ubiq.co\/tech-blog\/wp-content\/uploads\/2020\/11\/disable-http-options-method-apache.jpg?fit=1200%2C939&ssl=1","jetpack_shortlink":"https:\/\/wp.me\/pbGGTT-Dm","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ubiq.co\/tech-blog\/wp-json\/wp\/v2\/posts\/2440","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ubiq.co\/tech-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ubiq.co\/tech-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ubiq.co\/tech-blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ubiq.co\/tech-blog\/wp-json\/wp\/v2\/comments?post=2440"}],"version-history":[{"count":21,"href":"https:\/\/ubiq.co\/tech-blog\/wp-json\/wp\/v2\/posts\/2440\/revisions"}],"predecessor-version":[{"id":9312,"href":"https:\/\/ubiq.co\/tech-blog\/wp-json\/wp\/v2\/posts\/2440\/revisions\/9312"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ubiq.co\/tech-blog\/wp-json\/wp\/v2\/media\/2453"}],"wp:attachment":[{"href":"https:\/\/ubiq.co\/tech-blog\/wp-json\/wp\/v2\/media?parent=2440"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ubiq.co\/tech-blog\/wp-json\/wp\/v2\/categories?post=2440"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ubiq.co\/tech-blog\/wp-json\/wp\/v2\/tags?post=2440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}