Security Problem ?

Author Message

Heiner Wurbs

Thursday 09 November 2006 9:09:08 am

I have a question concerning the security of documents inside the storage directory.

I can access them via URL:
http://www.my-site.de/var/mysite/storage/original/application/.....

Can we avoid this with the mod_rewrite ?

Heiner

Claudia Kosny

Thursday 09 November 2006 9:24:33 am

Hello Heiner

As far as I know this should have been forbidden by the lines

<FilesMatch ".">
order allow,deny
deny from all
</FilesMatch>

in the default htaccess.

Regards

Claudia

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.