WordPress.org

Ready to get started?Download WordPress

Forums

Mute Screamer
mod_php in .htaccess usage (2 posts)

  1. MickeyRoush
    Member
    Posted 2 years ago #

    I'm not sure if this is much of a problem, but I noticed in the directory:
    mute-screamer\libraries\IDS
    There's an .htaccess file with this in it:

    # in case PHPIDS is placed in the web-root
    deny from all
    
    # silence is golden
    php_flag display_errors off

    Some of the sites I host on, do not have mod_php as an Apache module. So the above reference of php_flag display_errors off would normally throw errors and possibly keep mute screamer from working correctly.

    My suggestion for compatibility sake, is just to have the deny from all without the usage of the php_flag.

    Thanks.

    http://wordpress.org/extend/plugins/mute-screamer/

  2. MickeyRoush
    Member
    Posted 2 years ago #

    I believe I've come up with something that may be a bit more secure. It still doesn't have any reference to mod_php (users may have to use php.ini to prevent showing of errors) but it seems to work better.

    Remove the .htaccess file from the location in the above post.

    Put this in the root directory of the plugin:

    Order Allow,Deny
    <FilesMatch "^mscr\.css$">
    Allow from all
    </FilesMatch>

    Per Apache only the mscr.css file will be allowed, no others, as it must be included with an Allow from, otherwise everything else is denied. Seems to work for me. The other .htaccess file was causing me issues.

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic