[pmwiki-users] Re: wiki farm vs individual programs

[Jon Haupt]

Thanks, Hans. Oddly, I had tried that before, and it didn't seem to work, 
but maybe I had a configuration problem because it seems to work now. It 
does appear that I can access only the files within /pub, and not even 
browse to those directories, which probably makes the most sense. I think I 
like this better than just preventing access to pmwiki.php because as I said 
before I could still browse to the pmwiki root directory and look around or 
run scripts, etc.

I still wonder why I couldn't get it to work in /home/blah/pmwiki but maybe 
it really was a server configuration that I couldn't change.

Thanks again,

Jon

On 6/3/05, Hans <design at flutesong.net> wrote: 
> 
> Hi Jon, you may try this (from Cookbook.FarmSecurity):
> 
> If it is not possible to move the farminstallation out of 
> the public server space and the server is running Apache
> and .htacess can be used try this:
> Create a .htacess file in the farm's installation directory
> (where pmwiki.php resides) with this:
> 
> Order Deny, Allow 
> Deny from All
> 
> and create another .htaccess file in the farm's pub/ directory with this:
> 
> Allow from All
> 
> The first .htaccess file prevents public access to the farm installation,
> including pmwiki.php and the scripts/ and cookbook/ directories.
> The second .htaccess file allows browser access to the pub/ directory
> and its subdirectories like css/, guiedit/ and skins/.
> 
> 
> 
> Best,
> ~Hans
> 
> _______________________________________________
> pmwiki-users mailing list
> pmwiki-users at pmichaud.com
> http://pmichaud.com/mailman/listinfo/pmwiki-users 
> 

 <jhaupt at iastate.edu>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /pipermail/pmwiki-users/attachments/20050603/2af532bc/attachment.html