View Single Post
  #7  
Old 06-11-2004, 10:22 AM
 
Konig Konig is offline
 

Advanced Member
  
Join Date: Jun 2004
Location: Ohio, USA
Posts: 77
 

Default

You may want to add an .htaccess file like this to the directory as well to prevent people from accessing vital areas of your store. Good luck!

Code:
# .htaccess by Konig (06/07/2004) Options -Indexes DirectoryIndex index.php # block all files in uppercase letters (i.e. VERSION) RedirectMatch gone ^/[A-Z].+$ # block all smarty templates RedirectMatch gone ^/.*\.tpl$ # block all .php and .pl files in the root directory except for index.php # remove |pl if you want to execute patch.pl, otherwise, leave alone # example: install.php, config.php just in case if there is an exploit someday # which can reveal the source code of php files RedirectMatch gone ^/[^/]*([^index])\.(php|pl)$ # block the entire log directory ReDirect gone /log # block all .log (log files), .sql (sql dump/export) and .conf (config files) files # in case some day these files move to another directory RedirectMatch gone ^.*\.(sql|log|conf)$ # block access to the 'Smarty-*' directory RedirectMatch gone ^.*Smarty.*$ # block access to /upgrade Redirect gone /upgrade # block access to /skin1_original Redirect gone /skin1_original # block access to the /sql directory Redirect gone /sql # block access to the /shipping directory Redirect gone /shipping # block access to the pgp directories Redirect gone /.pgp Redirect gone /.pgp.def

__________________
-der Konig

3.5.8 - LIVE
4.0.0 - Developed and LIVE

4.0.18 - SQL DB
Reply With Quote