opdavies/oliverdavies.uk
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Packages Wiki Activity Actions

Spaces

Browse source
This commit is contained in:
Oliver Davies 2015-06-14 03:27:41 +01:00
parent 1f815ba7bc
commit eb3dbc40bb
116 changed files with 1123 additions and 1123 deletions
Download patch file Download diff file Expand all files Collapse all files

16
source/_posts/2012-05-23-apache-text-files.md
View file

@ -3,15 +3,15 @@ title: Prevent Apache from displaying text files within a web browser
nav: blog
slug: prevent-apache-displaying-text-files-within-web-browser
tags:
- apache
- code
- drupal
- apache
- code
- drupal
---
When you download [Drupal](http://drupal.org), there are several text files that are placed in the root of your installation. You don't want or need these to be visible to anyone attempting to view them in a browser - especially CHANGELOG.txt as that includes the exact version of Drupal you are running and could therefore have security implications. Rather than delete these files or change the file permissions manually for each file, I can add the following lines into my VirtualHost configuration:
<Files ~ "\.txt$">
Order deny,allow
Deny from all
</Files>
<Files ~ "\.txt$">
Order deny,allow
Deny from all
</Files>
This prevents any files with a .txt extension from being accessed and rendered in a web browser.
This prevents any files with a .txt extension from being accessed and rendered in a web browser.