Hiding htaccess? - GoFuckYourself.com

cafeaulait · 02-13-2003, 02:22 PM

When I browse to my .htaccess file:

http://members.mysite.com/.htaccess

Explorer asks me if I would like to open or download it, and then lets me?! Obvioulsy thus exposing the location of the password file.

Its CHMOD to 644 and I got the following code in it:

<Files .*>
order allow,deny
deny from all
</Files>

How do I stop this from happening????

extreme · 02-13-2003, 02:31 PM

Let's see how badly mangled this will be:

<Files ~ "^\.ht">
Order allow,deny
Deny from all
</Files>

cafeaulait · 02-13-2003, 02:33 PM

Yeah, that's what I've already got in - I tried to write that in the post above but it got parsed I think.

Anything else I'm missing?

Jeffery · 02-13-2003, 02:57 PM

Quote:

Originally posted by extreme
Let's see how badly mangled this will be:

<Files ~ "^\.ht">
Order allow,deny
Deny from all
</Files>

That should be all you need. In fact, I can't believe it wasn't already in your httpd.conf

The server does have AccessFileName set to .htaccess right?

02-13-2003, 02:22 PM	#1
cafeaulait Confirmed User Industry Role: Join Date: Jun 2002 Posts: 587	Hiding htaccess? When I browse to my .htaccess file: http://members.mysite.com/.htaccess Explorer asks me if I would like to open or download it, and then lets me?! Obvioulsy thus exposing the location of the password file. Its CHMOD to 644 and I got the following code in it: <Files .*> order allow,deny deny from all </Files> How do I stop this from happening????

02-13-2003, 02:31 PM	#2
extreme Confirmed User Industry Role: Join Date: Oct 2002 Location: lalaland Posts: 2,120	Let's see how badly mangled this will be: <Files ~ "^\.ht"> Order allow,deny Deny from all </Files> __________________ Browse and find new paysites with screenshot-preview Export FHGs/FLVs/Paysites by JSON, XML, CSV and Text Find FHGs/FLVs/Paysites from any given Category or Search-query

02-13-2003, 02:33 PM	#3
cafeaulait Confirmed User Industry Role: Join Date: Jun 2002 Posts: 587	Yeah, that's what I've already got in - I tried to write that in the post above but it got parsed I think. Anything else I'm missing?