Page 1 of 1

Better secure your config files...

Posted: 05 Dec 2006, 08:04
by Lonesome Walker
I think, you should integrate a .htaccess with
Code
<Files>
   Order allow,deny
   Deny from all
   Satisfy All
</Files>
in all your newer packages.
Why? Think a bit of security...
Now, the galery is safe, but what, if somebody will find a weak spot in your script? And this depends on settings in the INI-files?

You also can add:
Code
#force the html files to be executed as php files
AddType application/x-httpd-php .html	
AddType application/x-httpd-php .htm
for a bit more security...

Greets

Lonesome Walker
PS: Of course, the server should support this :wink:

Posted: 06 Dec 2006, 12:28
by Nick
There is nothing special in .ini files, then .htaccess is supported by apache only.