Skip to content
Snippets Groups Projects
Commit e2764d54 authored by Chris Müller's avatar Chris Müller Committed by Ralf Zimmermann
Browse files

[DOCS] Add directive to deny access for current Apache

The example in the note shows how to deny access up to Apache 2.2.
The directive for the current version is added.

Resolves: #90433
Releases: master, 9.5
Change-Id: I7842af8acdf632aebab8b8f63637450efd4fa23c
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63321


Tested-by: default avatarTYPO3com <noreply@typo3.com>
Tested-by: default avatarBjörn Jacob <bjoern.jacob@tritum.de>
Tested-by: default avatarRalf Zimmermann <ralf.zimmermann@tritum.de>
Reviewed-by: default avatarBjörn Jacob <bjoern.jacob@tritum.de>
Reviewed-by: default avatarRalf Zimmermann <ralf.zimmermann@tritum.de>
parent e9ce4fb1
Branches
Tags
No related merge requests found
......@@ -41,13 +41,22 @@ desired upload storage.
In principle, files in filemounts are publicly accessible. If the
uploaded files could contain sensitive data, you should suppress any
HTTP access to the filemount. This may, for example, be achieved by
creating a .htaccess file, assuming you are using an Apache web server.
The directive of the .htaccess file is fairly easy:
.. code-block:: html
Order deny,allow
Deny from all
creating a :file:`.htaccess` file, assuming you are using an Apache web
server. The directive of the :file:`.htaccess` file is fairly easy:
.. code-block:: apache
# Apache ≥ 2.3
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
# Apache < 2.3
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
Satisfy All
</IfModule>
The following code block shows you how to configure additional filemounts
for form definitions.
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment