I can fix it by putting "AllowOverride All" in my vhost. -- Mahara core files are exposed https://bugs.launchpad.net/bugs/571709 You received this bug notification because you are a member of Mahara Core, which is subscribed to Mahara.
Status in Mahara ePortfolio: In Progress Bug description: Mahara files are available in google, i.e. http://www.google.com/search?hl=en&client=opera&hs=Ebo&rls=en&q=%22Index+of%22+%2B%22%2Flib%2Fdwoo%2Fmahara%22 This does not seem to be a security risk as is, but it might be, because people might put stuff in accessible files that don't belong there, and all in all I think you should protect your users against stupid mistakes. _______________________________________________ Mailing list: https://launchpad.net/~mahara-core Post to : [email protected] Unsubscribe : https://launchpad.net/~mahara-core More help : https://help.launchpad.net/ListHelp

