urgent...security issues!

Author Message

kevin wei

Tuesday 11 January 2005 10:34:26 pm

i in stall ez on a non-virtual host, and i cannot put .htaccess under my root folder, which will cause i cannot access the whole site, so i change all file's name under settings to xxx.ini.php.
to my surprise, i can see all contents by http://xxx.com/settings/xxx.ini.php

how can i protect these file from accessing by http protocol?

thanks!

Gabriel Ambuehl

Tuesday 11 January 2005 11:59:22 pm

Sounds like a misconfiguration of the webserver. You should talk to your webhoster.

Visit http://triligon.org

kevin wei

Wednesday 12 January 2005 12:24:55 am

yes,
but i cannot ask him changed for me, do there have any other way can make it securty.
i found i can not access xxx.ini.append file, so can i rename all ini files under settings to ini.append or delete theme all, only left files under override and siteaccess.

thx

Björn Dieding@xrow.de

Wednesday 12 January 2005 1:51:17 pm

if

http://xxx.com/settings/xxx.ini.php files are readable and you cannot place a .htaccess there is no hope for you :-)... Still liek said before talk to your host

another idea could be to place a .htaccess in setttings/

also remove the runcronjobs.php

Looking for a new job? http://www.xrow.com/xrow-GmbH/Jobs
Looking for hosting? http://hostingezpublish.com
-----------------------------------------------------------------------------
GMT +01:00 Hannover, Germany
Web: http://www.xrow.com/

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.

eZ debug

Timing: Jan 19 2025 01:12:09
Script start
Timing: Jan 19 2025 01:12:09
Module start 'layout'
Timing: Jan 19 2025 01:12:09
Module start 'content'
Timing: Jan 19 2025 01:12:10
Module end 'content'
Timing: Jan 19 2025 01:12:10
Script end

Main resources:

Total runtime0.5824 sec
Peak memory usage4,096.0000 KB
Database Queries62

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0060 590.1641152.6094
Module start 'layout' 0.00600.0035 742.773439.4141
Module start 'content' 0.00950.5712 782.1875572.6953
Module end 'content' 0.58080.0016 1,354.882812.1797
Script end 0.5823  1,367.0625 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.00350.5968160.0002
Check MTime0.00140.2331160.0001
Mysql Total
Database connection0.00090.148010.0009
Mysqli_queries0.530791.1193620.0086
Looping result0.00070.1249600.0000
Template Total0.547794.120.2739
Template load0.00210.353720.0010
Template processing0.545793.696420.2728
Template load and register function0.00010.024510.0001
states
state_id_array0.00090.152810.0009
state_identifier_array0.00120.212620.0006
Override
Cache load0.00170.2927200.0001
Sytem overhead
Fetch class attribute can translate value0.00120.212630.0004
Fetch class attribute name0.00150.265650.0003
XML
Image XML parsing0.00080.136430.0003
class_abstraction
Instantiating content class attribute0.00000.001750.0000
General
dbfile0.00100.1647160.0001
String conversion0.00000.002040.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1node/view/full.tplfull/forum_topic.tplextension/sevenx/design/simple/override/templates/full/forum_topic.tplEdit templateOverride template
4content/datatype/view/ezxmltext.tpl<No override>extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tplEdit templateOverride template
2content/datatype/view/ezxmltags/line.tpl<No override>design/standard/templates/content/datatype/view/ezxmltags/line.tplEdit templateOverride template
4content/datatype/view/ezxmltags/paragraph.tpl<No override>extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tplEdit templateOverride template
1content/datatype/view/ezimage.tpl<No override>extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tplEdit templateOverride template
1print_pagelayout.tpl<No override>extension/community/design/community/templates/print_pagelayout.tplEdit templateOverride template
 Number of times templates used: 13
 Number of unique templates used: 6

Time used to render debug report: 0.0002 secs