Chris Fordham wrote:
> How how are the .inc files protected?
> In the default package there should be .htaccess files to prevent
> reading of .inc files.
There is already a .htaccess in the html folder, so I am not sure what
you mean.
# svn blame .htaccess
159 roundcube # AddDefaultCharset UTF-8
252 thomasb php_flag display_errors Off
252 thomasb php_value upload_max_filesize 2M
3 roundcube
3 roundcube <FilesMatch "(\.inc|\~)$|^_">
3 roundcube Order allow,deny
3 roundcube Deny from all
3 roundcube </FilesMatch>
3 roundcube
3 roundcube Order deny,allow
3 roundcube Allow from all
I realised that all my servers are blocking .svn folders but that
roundcube does not and that it _could_ (I did not check) cause an issue.
>> # Block access to SVN files
>> <IfModule mod_access.c>
>> <DirectoryMatch ~ "^/.*/.svn">
>> Order allow,deny
>> Deny from all
>> ErrorDocument 403 "<h1>Access Denied</h1>"
>> </DirectoryMatch>
>> </IfModule>
Thomas
> --Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
LOL ...
