1 Replies - 5388 Views - Last Post: 05 October 2013 - 01:30 PM

#1 mutago234   User is offline

  • D.I.C Regular

Reputation: 1
  • View blog
  • Posts: 260
  • Joined: 08-September 13

how to prevent symlink attack using .htaccess files

Posted 04 October 2013 - 11:04 PM

I want prevent symlink attack so i first disable symlink using disable_functions

I need to know other ways of protecting symlink attack using .htaccess files
Is This A Good Question/Topic? 0
  • +

Replies To: how to prevent symlink attack using .htaccess files

#2 Atli   User is offline

  • Enhance Your Calm
  • member icon

Reputation: 4240
  • View blog
  • Posts: 7,216
  • Joined: 08-June 10

Re: how to prevent symlink attack using .htaccess files

Posted 05 October 2013 - 01:30 PM

Moved to the Web Servers & Hosting forum. This is not a PHP question, and therefore does not belong in the PHP forum. Please try to post your questions in the most appropriate forum.

To answer your question, Apache has the FollowSymLinks option, for the Options directive, which can be used to allow it to follow symbolic links. You can remove that option in .htaccess files for specific directories if needed. - You may also need to take other mods into consideration, such as the rewrite mod. It can also be used to rewrite symbolic links. To prevent that, you may need to use the RewriteCond directive to detect symbolic links and have rewrite rules avoid them.
Was This Post Helpful? 0
  • +
  • -

Page 1 of 1