Login or Register

RSS IconRecent posts in this topic

avatar
fueg0 on Mar 31. 2007. 2:30 pm
Hi! It's possible to access to the /upload and other folders using a direct URL.
How to prevent this, ie, how to only permit access to the files in the /upload when the link is clicked inside the ActiveCollab interface?

How to secure the application using .htaccess and robots.txt?

Many thanks.
avatar Staff
Ilija Studen on Mar 31. 2007. 2:45 pm
Recommended setup is to leave only content of public folder accessible through web (by moving all other files behind document root). Only stuff in /public is considered safe for public access.

If that is not possible you can password protect /upload (or any other) folder to avoid direct access to files. There is a number of tutorials explaining how to do this for different servers and your hosting provider most probably has an entry in their knowledge base that explains how to set it up on their servers.
activeCollab Team Member
avatar
fueg0 on Mar 31. 2007. 5:47 pm
I moved the files behind the root dir and created a symbolic link to the /public folder
Now the apps doesn't work. It imports the files but the only thing I got is a blank screen. Any way to debug this?
avatar
fueg0 on Mar 31. 2007. 6:17 pm
Solved! I just found the option on the /config/config.php
I debuged, chmod the upload folder and that's it! Solved! Now the upload folder is secure.
Topic is locked. If you have something important to say about issues discussed on this page please write at hi@a51dev.com.

RSS IconRecent posts in this topic