[pmwiki-users] Need some help with a wiki.d security breach

Neil Herber (nospam) nospam at eton.ca
Thu Nov 2 11:14:13 CST 2006


On 2006-11-02 John Coxon is rumoured to have said:
> > What about the .htaccess file that is supposed to be in wiki.d/ --
> > > is it there, or has it disappeared?
> 
> The .htaccess file is present and contains:
> 
> Order Deny,Allow
> Deny from all

I use an Apache AliasMatch line to kill serving from wiki.d. This does 
require access to the Apache config file(s) but it means my entire farm 
is protected by one single config line.

> AliasMatch (.*)/wiki\.d/(.*) path/to/errorpage.htm


-- 
Neil Herber
Corporate info at http://www.eton.ca/




More information about the pmwiki-users mailing list