Forums / General / urgent...security issues!

"Please Note:
  • At the specific request of Ibexa we are changing this projects name to "Exponential" or "Exponential (CMS)" effective as of August, 11th 2025.
  • This project is not associated with the original eZ Publish software or its original developer, eZ Systems or Ibexa".

urgent...security issues!

« 
Previous topic
|
General
|
Next topic
 »
Author Message

kevin wei

Tuesday 11 January 2005 10:34:26 pm

i in stall ez on a non-virtual host, and i cannot put .htaccess under my root folder, which will cause i cannot access the whole site, so i change all file's name under settings to xxx.ini.php.
to my surprise, i can see all contents by http://xxx.com/settings/xxx.ini.php

how can i protect these file from accessing by http protocol?

thanks!

Gabriel Ambuehl

Tuesday 11 January 2005 11:59:22 pm

Sounds like a misconfiguration of the webserver. You should talk to your webhoster.

Visit http://triligon.org

kevin wei

Wednesday 12 January 2005 12:24:55 am

yes,
but i cannot ask him changed for me, do there have any other way can make it securty.
i found i can not access xxx.ini.append file, so can i rename all ini files under settings to ini.append or delete theme all, only left files under override and siteaccess.

thx

Björn X

Wednesday 12 January 2005 1:51:17 pm

if

http://xxx.com/settings/xxx.ini.php files are readable and you cannot place a .htaccess there is no hope for you :-)... Still liek said before talk to your host

another idea could be to place a .htaccess in setttings/

also remove the runcronjobs.php