Page 1 of 1

[fixed] 1.10 Beta3: doc/.htaccess allows /.../ .pdf files

Posted: Mon Sep 19, 2011 10:09 am
by fredp
Hi,

The 1.10-beta3 doc/.htaccess file allows access to the new file doc/CMSMS_config_reference.pdf by default. If this isn't by design, then maybe the .pdf file extension should be added to the list of those file types that are denied by default. I propose changing...
<Files ~ "\.(php|php3|php4|php5|phtml|pl|cgi|txt)$">
order deny,allow
deny from all
</Files>
to
<Files ~ "\.(php|php3|php4|php5|phtml|pl|cgi|txt|pdf)$">
order deny,allow
deny from all
</Files>

Re: CMSMS 1.10 Beta3: doc/.htaccess allows access to .pdf fi

Posted: Mon Sep 19, 2011 12:47 pm
by Rolf
Hi Fredp

I noticed this yesterday too, so already fixed in SVN ;)

Keep on testing!!

:) Rolf