Re: [cobalt-users] Fetching .htaccess and .htpasswd files

["Neil J. Kemp" <cobalt@xxxxxxxxxx>]

Easiest way is not to put the .htpasswd file in the web tree at all. Store
it in the /home/sites/sitexx directory NOT the /home/sites/sitexx/web. The
server will still be able to read it (modify the .htaccess file
acccordingly to the new path) but noone can download it from the web.

Incidently to my knowledge people can ONLY download a .htaccess file from
a directory IF they have previously authenticated anyway.

--Neil

On Thu, 9 Mar 2000, manitu wrote:

> Hello all,
> 
> I just noticed that everybody can fetch a .htpasswd and .htaccess file via
> the web if they are located in the /web directories on a RaQ2.
> 
> Does anybode know how to config the server not to deliver files beginning
> with a dot via the web ?
> 
> Thanks
> Manuel
> 
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>