[TYPO3-dev] Info disclosure from extension folders

[Andreas Otto]

Hi Ernesto,

Ernesto Baschny [cron IT] wrote:

> That sounds pretty cool. Unfortunately DirectoryMatch cannot be put into
> a .htaccess file, else we could put that in the sample _.htaccess that
> we ship with TYPO3. So to achieve that using .htaccess we would have to
> put the a .htaccess like that:

Overwriting apache directives using .htaccess is not very resource friendly.
We should better encourage TYPO3 admins to overwrite settings inside the
apache configuration. Either global or for a virtual host only.


Cheers,
Andreas

-- 
Andreas Otto

d.k.d Internet Service GmbH
Kaiserstraße 79
60329 Frankfurt / Main
Fon: +49 69 43056170
Fax: +49 69 43056190
Mail: andreas.otto at dkd.de
Home: www.dkd.de