How to Protect your Images and TMP Directories.

Back to search


Most websites require their images and tmp directories to have Full Write Access. This is in order to store files that are generated by the website itself.

Occasionally there are vulnerabilities in the website's own code. These vulnerabilities can allow a 'hacker' to upload their PHP, or Perl scripts into the affected directories. These files are designed to exploit the website, e.g. to send out massive email spamming campaigns.

TO AVOID THIS:
Create an .htaccess file with the following content and save it in each of the directories that you wish to secure.


<files "*.php"="">
Deny from all
</files>

<files "*.pl"="">
Deny from all
</files>

Allow from all

Also Read

Becoming familiar with databases in phpMyAdmin
This tutorial assumes you've already logged in to phpMyAdmin Now let's familiarize ourselves...
Website Hosting - Glossary of Terms
The following is a glossary of popular words associated with web hosting. Address The unique...
Importing databases and tables with phpMyAdmin
This tutorial assumes you've already logged in to phpMyAdmin Now let's learn how to...
Configuring your website in WS_FTP
This tutorial assumes you already have WS_FTP running on your computer, but have not connected to...