Need Clarification on Webserver config & Apache 2.4

Get help with installation and running phpBB 3.1.x here. Please do not post bug reports, feature requests, or extension related questions here.
Get Involved
Post Reply
Lon2
Registered User
Posts: 52
Joined: Fri Sep 25, 2015 5:37 pm

Need Clarification on Webserver config & Apache 2.4

Post by Lon2 » Mon Nov 06, 2017 11:48 pm

Hello,

I need clarification on cache/, files/ and store/ folder permissions. I have two phpBB 3.1.11 versions, one with .htaccess files in the aforementioned 3 folders and one version (assuming later) without. I want to make sure I have them setup correctly now that I'm on Apache 2.4.25. The version with .htaccess files I believe has been updated from older versions. I noticed newer downloads don't have .htaccess files in those folders and the main/root .htaccess has "if Apache 2.4" statements. What would be the correct or best way to Deny access to these 3 folders with phpBB 3.1.11 on Linux with Apache 2.4.25?

Thank you!
6.ii. Webserver configuration
Depending on your web server, you may have to configure your server to deny web access to the cache/, files/, store/ and other directories. This is to prevent users from accessing sensitive files.

For Apache there are .htaccess files already in place to do this for you. Similarly, for Windows based servers using IIS there are web.config files already in place to do this for you. For other webservers, you will have to adjust the configuration yourself. Sample files for nginx and lighttpd to help you get started may be found in docs/ directory.

Lon2
Registered User
Posts: 52
Joined: Fri Sep 25, 2015 5:37 pm

Re: Need Clarification on Webserver config & Apache 2.4

Post by Lon2 » Thu Dec 07, 2017 8:39 am

Anyone? :(

janus_zonstraal
Registered User
Posts: 1799
Joined: Sat Aug 30, 2014 1:30 pm

Re: Need Clarification on Webserver config & Apache 2.4

Post by janus_zonstraal » Thu Dec 07, 2017 8:49 am

There is a htaccess in the download package (Full Package)
So it is easy to compare.
Sorry! My English is bat ;) !!!

User avatar
Mick
Support Team Member
Support Team Member
Posts: 18114
Joined: Fri Aug 29, 2008 9:49 am
Location: Cardiff

Re: Need Clarification on Webserver config & Apache 2.4

Post by Mick » Thu Dec 07, 2017 8:09 pm

Webserver config is beyond the scope of these forums.
"The more connected we get the more alone we become" - Kyle Broflovski

There are no ‘threads’ in phpBB, they are topics.
Forza Garibaldi

User avatar
3Di
Registered User
Posts: 11864
Joined: Mon Apr 04, 2005 11:09 pm
Location: Milano - Frankfurt
Name: Marco
Contact:

Re: Need Clarification on Webserver config & Apache 2.4

Post by 3Di » Fri Dec 08, 2017 5:04 am

Lon2 wrote:
Mon Nov 06, 2017 11:48 pm
I noticed newer downloads don't have .htaccess files in those folders and the main/root .htaccess has "if Apache 2.4" statements. What would be the correct or best way to Deny access to these 3 folders with phpBB 3.1.11 on Linux with Apache 2.4.25?
You don't need to do anything as long there is the main/root/.htaccess file in place. As it is.

Try to browse to main/root/files/ and you will see.

You should get something like this: files/
Want to compensate me for my interest? Donate
Please PM me only to request paid works. Thx.
Extensions, Scripts, MOD porting, Update/Upgrades

User avatar
david63
Jr. Extension Validator
Posts: 13127
Joined: Thu Dec 19, 2002 8:08 am
Location: Lancashire, UK
Name: David Wood
Contact:

Re: Need Clarification on Webserver config & Apache 2.4

Post by david63 » Fri Dec 08, 2017 8:17 am

On a default installation those three folders should have both a .htaccess file and a index.htm file - if they are missing just copy them from one of the other folders.

Not have one, or both, of those files will not stop phpBB from running - they just add a level of security to prevent access to those folders.
David
Remember: You only know what you know and - you don't know what you don't know!
My CDB Contributions | How to install an extension
I will not be accepting translations for any of my extensions in Github - please post any translations in the appropriate topic.
No support requests via PM or email as they will be ignored

Post Reply

Return to “[3.1.x] Support Forum”

Who is online

Users browsing this forum: Jimmy_Jamblez and 25 guests