[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1072729: Acknowledgement (apache2: misleading comment in default /etc/apache2/apache2.conf about accessibility of root filesystem)



Hi again,

similar issue with .htaccess and .htpasswd - a simple symlink and Apache happily serves the file(s) so the following lines don't really prevent this.

--- 8< ---
#
# The following lines prevent .htaccess and .htpasswd files from being
# viewed by Web clients.
#
<FilesMatch "^\.ht">
        Require all denied
</FilesMatch>
--- 8< ---

And btw: why not this?
--- 8< ---
<FilesMatch "^\.(htaccess|htpasswd)">
--- 8< ---


Regards,
 Oliver


Reply to: