How to Protect your Images and TMP Directories.

Back to search


Most websites require their images and tmp directories to have Full Write Access. This is in order to store files that are generated by the website itself.

Occasionally there are vulnerabilities in the website's own code. These vulnerabilities can allow a 'hacker' to upload their PHP, or Perl scripts into the affected directories. These files are designed to exploit the website, e.g. to send out massive email spamming campaigns.

TO AVOID THIS:
Create an .htaccess file with the following content and save it in each of the directories that you wish to secure.


<files "*.php"="">
Deny from all
</files>

<files "*.pl"="">
Deny from all
</files>

Allow from all

Also Read

How do I know if my website needs Windows based or Linux based hosting?
This would depend on the format of your website. Windows hosting is used for .asp and .aspx...
Configuring your website in FlashFXP
This tutorial assumes you already have FlashFXP running on your computer, but have not...
Deleting fields from database tables with phpMyAdmin
This tutorial assumes you've already logged in to phpMyAdmin Now let's learn how to delete...
How to use the Disk Space Usage tool in cPanel
This demo assumes you've already logged in to cPanel Now let's learn how to use the Disk Space...