Menu

#34 Missing .htaccess in src/core (Security warning!)

v1.0-beta4
open
nobody
General (7)
9
2007-09-21
2007-09-21
Quis
No

There is no .htaccess in src/core, that should be denying all access from anyone to everywhere

Create src/core/.htaccess:
Order Allow,Deny
Deny from all

Without this file, streamline is vulnerable to several RFI's, what could be exploited by hackers to get access to your system

Discussion

  • Quis

    Quis - 2007-09-21
    • milestone: --> v1.0-beta4
    • priority: 5 --> 9
     
  • Quis

    Quis - 2007-09-21
    • summary: Missing .htaccess in src/core --> Missing .htaccess in src/core (Security warning!)
     

Log in to post a comment.

MongoDB Logo MongoDB