Re: How safe is a .htaccess file?

From:	Robert Cummings	Date:	Tue, 17 Aug 2010 20:35:06 +0000
Subject:	Re: How safe is a .htaccess file?
References:	1 2	Groups:	php.general
Request:	Send a blank email to php-general+get-307509@lists.php.net to get a copy of this message

On 10-08-17 04:23 PM, Peter Lind wrote:

On 17 August 2010 22:17, tedd<tedd@sperling.com> wrote:
Hi gang: The subject line says it all. How secure is a .htaccess file to store passwords and other sensitive stuff? Can a .htaccess file be viewed remotely?
No, Apache won't serve it.

It's a configuration setting though, and not a hard-coded feature. # # The following lines prevent .htaccess and .htpasswd files from being # viewed by Web clients. # <FilesMatch "^\.ht">

    Order allow,deny
    Deny from all
    Satisfy All

</FilesMatch> Cheers, Rob. -- E-Mail Disclaimer: Information contained in this message and any attached documents is considered confidential and legally protected. This message is intended solely for the addressee(s). Disclosure, copying, and distribution are prohibited unless authorized.