Simple Invoices - Forum

absuk

hello,

dose any one know how to disable direct access to http://invoice.domain.co.uk/config/config.ini,

at the moment if you type that in the web address anyone can view the config file, which is a big security problem.

cheers

abs

justin

hey abs

in the release there is a .htaccess file in the root dir which prevents .ini access - you may have to enable allow override in your apapche config

ie. http://simpleinvoices.org/demo/config.ini

let us know how you go

cheers

justin

absuk

Cheers Justin,

That did the trick, I use a Mac, as such the .htaccess file is hidden, so did not even see it, even when i SSH onto my server it wont show it, all fixed now. thanks again.

abs

Simple Invoices - Forum

Howdy, Stranger!

Categories