Back to search

How to Protect your Images and TMP Directories.


Most websites require their images and tmp directories to have Full Write Access. This is in order to store files that are generated by the website itself.

Occasionally there are vulnerabilities in the website's own code. These vulnerabilities can allow a 'hacker' to upload their PHP, or Perl scripts into the affected directories. These files are designed to exploit the website, e.g. to send out massive email spamming campaigns.

TO AVOID THIS:
Create an .htaccess file with the following content and save it in each of the directories that you wish to secure.


<files "*.php"="">
Deny from all
</files>

<files "*.pl"="">
Deny from all
</files>

Allow from all
Was this answer helpful?      

Also Read

Configuring your website in FlashFXP
This tutorial assumes you already have FlashFXP running on your computer, but have not...
Managing files in Leap FTP
This tutorial assumes you already have Leap FTP running on your computer and are connected to a...
Running SQL queries on a database with phpMyAdmin
This tutorial assumes you've already logged in to phpMyAdmin Now let's learn how to run SQL...
Becoming familiar with databases in phpMyAdmin
This tutorial assumes you've already logged in to phpMyAdmin Now let's familiarize ourselves...