Chris Fordham wrote:
How how are the .inc files protected? In the default package there should be .htaccess files to prevent reading of .inc files.
There is already a .htaccess in the html folder, so I am not sure what you mean.
# svn blame .htaccess 159 roundcube # AddDefaultCharset UTF-8 252 thomasb php_flag display_errors Off 252 thomasb php_value upload_max_filesize 2M 3 roundcube 3 roundcube <FilesMatch "(.inc|~)$|^_"> 3 roundcube Order allow,deny 3 roundcube Deny from all 3 roundcube </FilesMatch> 3 roundcube 3 roundcube Order deny,allow 3 roundcube Allow from all
I realised that all my servers are blocking .svn folders but that roundcube does not and that it _could_ (I did not check) cause an issue.
# Block access to SVN files
<IfModule mod_access.c> <DirectoryMatch ~ "^/.*/.svn"> Order allow,deny Deny from all ErrorDocument 403 "<h1>Access Denied</h1>" </DirectoryMatch> </IfModule>
Thomas
--Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
LOL ...