vb.org Archive - How to protect .htaccess Files ?

Page 2 of 2

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- Forum and Server Management (https://vborg.vbsupport.ru/forumdisplay.php?f=232)

- - How to protect .htaccess Files ? (https://vborg.vbsupport.ru/showthread.php?t=214512)

UKBusinessLive

05-25-2009 06:14 PM

Quote:

Originally Posted by tlwwolfseye (Post 1817025)

No, its is as it should be. .htaccess , no other extension. :) Thats why I wonder. And like i said, the other things in my .htaccess file work fine, just not the preventing to browse that file. But I will check with my hoster later.

Thanks.

WOlfseye

Remember to post back, if you fix it, i for one am interested on what the problem is, and it could help others.

Angel-Wings

05-25-2009 06:54 PM

Quote:

Originally Posted by tlwwolfseye (Post 1817025)

And like i said, the other things in my .htaccess file work fine, just not the preventing to browse that file.

Did you put

Quote:

<Files .htaccess>
order allow,deny
deny from all
</Files>

Inside the htaccess itself or the Webserver configuration ? The second option is the way to go.

tlwwolfseye

05-25-2009 08:09 PM

Into the .htaccess File. I am now waiting for a reply from our Hoster. Might not be there before tomorrow that I here from him. I will post here when I know whats the issues.

--------------- Added [DATE]1243319257[/DATE] at [TIME]1243319257[/TIME] ---------------

Ok, i found the issue by accident. Seems besides the

Code:

<Files .htaccess>

order allow,deny

deny from all

</Files>

I used another

Code:

<Files *>

order allow,deny







</Files>

around the actual Banned IP?s and when I removed that one and just kept the above Code to prevent browsing the .htaccess, it worked. So it seems 2x kinda similiar code isn?t appreciated by the .htaccess File. ;)

Just a couple of minutes ago my hoster confirmed that, he says that the second <Files> setting will overwrite the first.

GoneBushX

08-28-2013 05:05 PM

I added-

Code:

<FilesMatch "\.(htaccess|htpasswd|htgroup)$">

order allow,deny

deny from all

</FilesMatch>

:up:

Krusty1231

10-17-2013 11:18 AM

I checked mine and I could see it. I had the same issue as post #13.

It does pay to read the forums!

nhawk

10-17-2013 05:53 PM

If you can see htaccess, I'd run far, far away from your host.

htaccess should be a system level protected file. If it's not, the server's security is in major question.

All times are GMT. The time now is 02:19 PM.

Page 2 of 2

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01016 seconds Memory Usage 1,727KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (3)bbcode_code_printable (3)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (1)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (6)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: