note 74311 deleted from security.general by danbrown
| From: | danbrown@php.net | Date: | Fri, 08 May 2009 17:29:59 +0000 |
| Subject: | note 74311 deleted from security.general by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-154370@lists.php.net to get a copy of this message | ||
Note Submitter: Andreas R dot newsgroups2005 at geekmail dot de
----
In reply to: yairl at savion dot huji dot ac dot il (Important Security Note for emacs users)
> in apache webserver you can deny access to these files with the following configure order
> <File "*~">
> Deny all
> </File>
If you want to use .htaccess file, it should be:
<Files "*~">
Deny from all
</Files>
But then don't forget to set AllowOverride All (for the directory in question), e.g.
<Directory /var/www/localhost/htdocs>
AllowOverride All
</Directory>
since with the (default?) AllowOverride None the .htaccess files are ignored, see
http://issues.apache.org/bugzilla/show_bug.cgi?id=41760