Page MenuHomePhabricator

for added security, add .htaccess files to sensitive directories
Closed, ResolvedPublic

Description

Author: mw-bugs

Description:
Add an .htaccess to sensitive installation directories, inserting at a minimum:

Options -Indexes

to help prevent directory browsing on a Per-Directory basis...


Version: 1.5.x
Severity: normal
URL: http://www.insecurity.org/images/

Details

Reference
bz2636

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 8:35 PM
bzimport set Reference to bz2636.
bzimport added a subscriber: Unknown Object (MLST).

Note that:
a) we already include several .htaccess files with 'Deny from all'.
b) our directory layout and standard contents are public knowledge and well-known.

Closing as duplicate of bug 415 for any remaining issues.

  • This bug has been marked as a duplicate of 415 ***