Author Topic: for security ( .htaccess )  (Read 12719 times)

0 Members and 1 Guest are viewing this topic.

Offline matab

  • Newbie
  • *
  • Posts: 43
    • View Profile
for security ( .htaccess )
« on: March 05, 2008, 02:15:41 PM »
hello guys ..

why we don't protect folder ( data & Sub-files ) that have Permissions 777 .. by

.htaccess
that contain this code :

Quote
php_flag engine off

RemoveType .php .php3 .phtml .pl .cgi .html .htm .asp .aspx

for not allow any one can upload ( shell ) in our 4images  ...


Offline honda2000

  • 4images Guru
  • *******
  • Posts: 3.263
    • View Profile
    • Wir machen Internet!
Re: for security ( .htaccess )
« Reply #1 on: March 05, 2008, 05:19:53 PM »
dann müsste es aber die files:
pg,gif,png,aif,au,avi,mid,mov,mp3,mpg,swf,wav,ra,rm,zip,pdf in den Ordnern data/media und data/thumbnails ebenfalls schützen, also erweitert werden

Offline kai

  • Administrator
  • Addicted member
  • *****
  • Posts: 1.421
    • View Profile
    • 4images - Image Gallery Management System
Re: for security ( .htaccess )
« Reply #2 on: March 05, 2008, 05:47:33 PM »
@ honda2000:

I think you didn't get what matab wants to do. He wants to BLOCK these file types.
Your first three "must do" before you ask a question:
1. Forum rules
2. FAQ
3. Search

Offline honda2000

  • 4images Guru
  • *******
  • Posts: 3.263
    • View Profile
    • Wir machen Internet!
Re: for security ( .htaccess )
« Reply #3 on: March 05, 2008, 08:06:33 PM »
nein, falsch versatnden @Kai

klar, eine .htaccess zum blocken der .php .php3 .phtml .pl .cgi .html .htm .asp .aspx -Dateitypen

gleichzeigig noch eine .htaccess zum schützen der Ordner /data/media & /data/thumbnails (ich habs leider nicht richtig hinbekommen, hab nur den Admin-Ordner zusätzlich per .htaccess mit login & passwort geschützt

aber irgendwie müsste es ja gehen, die Ordner zusätzlich zu schützen (nur wer möchte) weil er die Galerie privat nutzt und usern keinen upload ermöglichen möchte

Offline matab

  • Newbie
  • *
  • Posts: 43
    • View Profile
Re: for security ( .htaccess )
« Reply #4 on: March 05, 2008, 11:21:31 PM »
:| sorry guys

I want to know what u says
so plz any one can put reply in english ... so that I can answer it ..