[SOLVED] .htaccess for uploads

[Ziggywigged]

I've tried using the method here... http://wiki.cmsmadesimple.org/index.php/How_to#How_to_Secure_CMSMS_system_-_Small_Guide
...to protect my uploads directory but it 'disables' anything in this directory when I implement. i.e. the browser won't load anything in/from my sub-directories.

My structure looks like this:

/uploads
  .htaccess
  /images
  /video

My htaccess file contains:

Code: Select all

<Files *.php>
    Order deny,allow
    Deny from All
</Files>

The site is running on an Apache server with PHP 5.2.5
Am I missing something?

Thanks.

[kermit]

try this.

http://svn.cmsmadesimple.org/svn/cmsmad ... /.htaccess

which currently contains:

Code: Select all

# To deny PHPs
<Files ~ "\.(php|php3|php4|php5|phtml|pl|cgi)$">                                                                              
  order deny,allow                                                                                                            
  deny from all                                                                                                               
</Files> 

originally discussed in this thread..

http://forum.cmsmadesimple.org/index.ph ... #msg111094

[Ziggywigged]

Ah ha, that does work. Thank you.

Is this related to PHP/Apache version?
Should this guide be revised?
http://wiki.cmsmadesimple.org/index.php/How_to#How_to_Secure_CMSMS_system_-_Small_Guide

[kermit]

afaik, the htaccess files for the various subdirectories of an install will be added in the next release, so yeah, there'll be some updates in the wiki needed.

[Pierre M.]

...htaccess files for the various subdirectories of an install will be added in the next release...

Good news !

Pierre M.