.htaccess Files

Hi folks
I have been looking at the important site security recommendation document athttp://www.zen-cart.com/wiki/index.php/Important_Site_Security_Recommendations

Section 7 of this document mentions the use of .htaccess files to help prevent snooping. I have done a quick search on my zencart build and have listed all the directories that have an blank index.html without a .htaccess file as well.

My question is should i include a basic .htaccess like the one also listed in section 7 along side these blank index.html files.

I have attached a plain txt file with a listing of my finding.

Regards
Jayson

There are many possible approaches depending on your hosting server's configuration. Some allow you to control with a cascading .htaccess file which catches all inappropriate access to all subdirectories, and others do not.

If you are uncertain or cannot get a clear answer from your host, then protect each folder manually. If you are using Windows hosting, don't rely on .htaccess ... use index.html instead, and work with your host to ensure you have the best security settings active in your account (well, as good as IIS can do anyway).

So ... not to pass the buck, but ... do what you have to do for your server. The guidelines are simply guidelines, as no one exact solution will work for everyone, since every host configures their server differently on their own whims (and changes it as they see fit, often without notice).

By the way, you seem to have extra admin folders in your download and media folders for some reason...

DrByte:

By the way, you seem to have extra admin folders in your download and media folders for some reason...
Thanks for pointing that out i guess it must have been a slip of the fingers when uploading or something.