Security and optimization

Thursday 26 January 2006 8:45:07 am

Hello,
I'm about to publish an intranet site on ez 3.5.4 (Apache2 + Php 4.3.10 / Windows Server 2003).
I've read this article about security settings for a virtual host setup (http://ez.no/doc/ez_publish/technical_manual/3_6/installation/virtual_host_setup) but what for a 'normal' ezpublish installation?
For example, what about the best <Directory> rules ? Any example will be helpfull.

Friday 27 January 2006 1:50:09 am

<Directory C:/web/site/ezSite>
	<Files index.php>
		Order allow,deny
		Allow from all
	</Files>
</Directory>

This rule means that the only file that can be accessed from the C:/web/site/ezSite directory is the file index.php. Your stylesheets and images cannot be loaded by the browser.

See http://ez.no/doc/ez_publish/technical_manual/3_6/installation/virtual_host_setup for apache configuration examples

Friday 27 January 2006 3:46:28 am

In that case, you can use the .htaccess_root file in the ez publish install directory. This file should be renamed .htaccess in order to be effective. Apache should be configured with AllowOverride in order to work with .htaccess files.
You could also put the directives from .htacess_root in a <Directory> section in Apache's httpd.conf.