mailing list archives
Re: How to filter .htaccess uploading?
From: "Colin Bean" <ccbean () gmail com>
Date: Fri, 10 Aug 2007 08:43:05 -0700
Are you referring to a file upload from a form on your website?
Don't know if you have control over the Apache config, but it's
probably a good idea to set
in whatever directory you're sending the uploaded files to (it's
probably a good idea to set this everywhere you don't need an
.htaccess, actually). Hopefully the script that's receiving your
uploads does some filtering, too...
On 8/9/07, Monty Ree <chulmin2 () hotmail com> wrote:
I heard that some attackers upload malicious .htaccess file using upload
So I would like to filter ".htaccess" uploading at apache, is there any
I know that modsecurity will solve this problem.. but I can't use
modsecurity yet for some reason.
Thanks in advance.
MSN Messenger를 통해 온라인상에 있는 친구와 대화를 나누세요.