Ticket #401 (closed defect: worksforme)

Opened 3 years ago

Last modified 4 weeks ago

conflict between server.indexfiles & url.access.deny

Reported by: Arnd Owned by: jan
Priority: normal Milestone: 1.4.20
Component: core Version:
Severity: normal Keywords:
Cc: Blocked By:
Need User Feedback: no Blocking:

Description

url.access-deny = ( "index.php", "~", ".inc", "\.ht", "inc.", ".inc.php" )

server.indexfiles = ( "index.php", "index.html", "index.htm", "default.htm" )

This config option allows access to http://www.domain.com/ (with an existing file named index.php) even with a denied access to files named "index.php".

Access to http://www.domain.com/index.php is properly denied.

Attachments

Change History

Changed 4 weeks ago by stbuehler

  • status changed from new to closed
  • resolution set to worksforme
  • pending unset

Really old, works now (for me)

Add/Change #401 (conflict between server.indexfiles & url.access.deny)

Author



Change Properties
<Author field>
Action
as closed
Next status will be 'reopened'
 
Note: See TracTickets for help on using tickets.