Forums / Suggestions / Security Problem ?

"Please Note:

At the specific request of Ibexa we are changing this projects name to "Exponential" or "Exponential (CMS)" effective as of August, 11th 2025.
This project is not associated with the original eZ Publish software or its original developer, eZ Systems or Ibexa".

Security Problem ?

Previous topic

Next topic

Author	Message
Heiner Wurbs	Thursday 09 November 2006 9:09:08 am I have a question concerning the security of documents inside the storage directory. I can access them via URL: http://www.my-site.de/var/mysite/storage/original/application/..... Can we avoid this with the mod_rewrite ? Heiner
Claudia Kosny	Thursday 09 November 2006 9:24:33 am Hello Heiner As far as I know this should have been forbidden by the lines <FilesMatch "."> order allow,deny deny from all </FilesMatch> in the default htaccess. Regards Claudia

Author

Message

Thursday 09 November 2006 9:09:08 am

I have a question concerning the security of documents inside the storage directory.

I can access them via URL:
http://www.my-site.de/var/mysite/storage/original/application/.....

Can we avoid this with the mod_rewrite ?

Heiner

Thursday 09 November 2006 9:24:33 am

Hello Heiner

As far as I know this should have been forbidden by the lines

<FilesMatch ".">
order allow,deny
deny from all
</FilesMatch>

in the default htaccess.

Regards

Claudia