[pmwiki-users] Need some help with a wiki.d security breach

[Neil Herber (nospam)]

On 2006-11-02 John Coxon is rumoured to have said:
> > What about the .htaccess file that is supposed to be in wiki.d/ --
> > > is it there, or has it disappeared?
> 
> The .htaccess file is present and contains:
> 
> Order Deny,Allow
> Deny from all

I use an Apache AliasMatch line to kill serving from wiki.d. This does 
require access to the Apache config file(s) but it means my entire farm 
is protected by one single config line.

> AliasMatch (.*)/wiki\.d/(.*) path/to/errorpage.htm


-- 
Neil Herber
Corporate info at http://www.eton.ca/