note 61269 deleted from function.highlight-file by bjori
| From: | bjori@php.net | Date: | Tue, 05 Sep 2006 13:16:56 +0000 |
| Subject: | note 61269 deleted from function.highlight-file by bjori | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-116697@lists.php.net to get a copy of this message | ||
Note Submitter: contact at soulpass dot com
----
A couple side notes about my previous post regarding security:
When I previewed the post, one of the backslashes in the regular expression disappeared, so I
escaped it with another backslash, and then it worked in the preview. When the note posted, both
backslashes appeared. Hopefully it will work in this update. The correct regular expression should
be:
(^/|\./)
Please change it if you use the suggestion in the post below.
Also, it would be a good idea to hide your valid_files.txt using .htaccess. The updated .htaccess is
as follows:
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^(.+).phps$ index.php?f=$1 [L]
</IfModule>
<Files valid_files.txt>
order allow,deny
deny from all
</Files>
Sorry for the confusion...