vb.org Archive - Protecting cache folder agains bad code injections?

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vB4 Programming Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=252)

- - Protecting cache folder agains bad code injections? (https://vborg.vbsupport.ru/showthread.php?t=309394)

postcd

03-11-2014 10:47 AM

Protecting cache folder agains bad code injections?

What re ways to protect 777 cache folder agains malicious files and code injection into files?

Is there any handy htaccess which prevent loading of malicious code? I know i found some topic about this, but cant find it.

fxdigi-cash

03-14-2014 11:17 AM

it should be very simple. all you have to do is to use .htaccess rules if you use Apache to prevent anyone from going there!!

if you want to allow all visitors, use this:

Code:

<Directory />

    Order Deny,Allow

    Allow from all

</Directory>

if you want to deny all, but allow only your local address 127.0.0.1, use this

Code:

<Directory />

Order Deny,Allow    

Deny from all

Allow from 127.0.0.1

</Directory>

if you want to deny all, use this:

Code:

<Directory />

Order Deny,Allow    

Deny from all

</Directory>

if you want to setup a password and username protection, that is different story:

Code:

Order deny,allow

Deny from all

AuthName "Restricted Area - Authorization Required" 

AuthUserFile /your/file/path/.htpasswd 

AuthType Basic

Require valid-user

All times are GMT. The time now is 11:45 AM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01055 seconds Memory Usage 1,708KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (4)bbcode_code_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (2)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: