Results 1 to 2 of 2

Hybrid View

  1. #1
    Join Date
    Aug 2005
    Location
    Australia
    Posts
    110
    Plugin Contributions
    1

    Default Security question

    My web host says that he made some changes to the server to increase security.

    I found this out because the define pages editor stopped working giving this message:
    Forbidden
    You don't have permission to access /Back0ff1ce/define_pages_editor.php on this server.


    --------------------------------------------------------------------------------

    Apache/1.3.37 Server at www.waycool.com.au Port 443
    He advised me to make additions to the .htaccess file as follows and this solved the problem.
    Code:
    </IfModule>
    <IfModule mod_security.c>
    SecFilterEngine off
    </IfModule>
    Can anybody advise if this change to the .htaccess file would adversely affect the security of my admin folder. If so I could still use dreamweaver to make future edits to the define pages.
    Cheers
    Cheers all,

    Gruntre69

    WayCool
    Zen is Way Cool too!

  2. #2
    Join Date
    Jan 2004
    Posts
    66,446
    Plugin Contributions
    81

    Default Re: Security question

    That's acceptable.
    It looks like you've already renamed your admin folder for greater security, so making this change should not be a problem.

    You can see mod_security issues discussed in various places in these forums, if you want more information on what it's all about.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. v150 Security Question
    By bcannon007 in forum General Questions
    Replies: 4
    Last Post: 4 Jun 2012, 01:18 AM
  2. Security Question
    By tstanley in forum General Questions
    Replies: 4
    Last Post: 1 Nov 2010, 07:49 PM
  3. Security question
    By Music Man in forum Upgrading from 1.3.x to 1.3.9
    Replies: 4
    Last Post: 26 Jul 2009, 05:31 AM
  4. security question
    By 100asa in forum General Questions
    Replies: 3
    Last Post: 18 Oct 2008, 05:40 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg