PHPFusion-mods.net | Your PHP Fusion resource - Articles: How to Secure Your Important Files

January 06 2009 12:30:11

Navigation

Last Seen Users

breker	Online
sathishIPL	< 5 mins
Ashvinmax	< 5 mins
xa0s	< 5 mins
LookMovie	00:10:11
Colognechaser	00:12:14
skorpion31	00:12:46
elyn	00:15:31
anum	00:21:45
djbigbaer	00:21:59

Guests Online: 0

Registered Members: 3,621

Newest Member: Colognechaser

Downloads v7

Currently popular Downloads
Professional Down...	543
Extended Profile	502
FusionBoard 4	473
Photoalbum Mass U...	470
Avatar Studio	450
HighSlide Gallery...	416
Photo in Profile	400
VArcade 1.7	388
Wap Mod	360
Who Is Online Adm...	337

Latest Downloads

Login Redirect	5
Apache Errors Mod	3
View & Delete all Co...	0
Mod "index.php + mod...	3
Comments Management	2
FB Latest Referrers ...	8
Slideshow Lightbox P...	10
RSS and Panel	11
Secure Admin Login	21
SQL Injection Block	22

Downloads v6

Currently popular Downloads
Video Gallery	376
EXTboard	362
Extreme Theme Editor	341
Icon Package 2.0	290
Banner System v2.0.4	284
Tabbed welcome panel	281
Fuzed Shoutbox	276
Extended Profile ...	272
News.php	265
Header Banner System	221

Latest Downloads

Login Redirect	0
Mod "index.php + mod...	0
Base Games	1
Banner exchange system	0
Poll with comments a...	88
Media Streamer	5
v6.01.18 FULL	14
v6.01.16 - v6.01.17	44
v6.01.15 - v6.01.16	1
v6.01.17 - v6.01.18	8

Provider

PHPfusion-mods.net is hosted at:

Online Stats

Guests online: 5
Members online:
breker

registered members: 3621
newest member: Colognechaser

user today:	3491
user online:	6
Max. onlinerecord:	43
Max. per day:	5705
user yesterday:	4842
user month:	27683
Entire users:	101466

last 24h:

How to Secure Your Important Files

Protect your config file with easy but effective protection. This method can be used to protect all your important files.

The config file is the file that stores your databases username, password, and all that other important information that you site uses to connect to the db. Even though the config file is a php file it doesnt make sense to not do anything about it. Open a existing .htaccess file or create a new .htaccess, do not put anything in front of .htaccess.

Add the following code to the .htaccess file to protect the config file from being access by anyone.

<Files "config.php">
order allow,deny
deny from all
</Files>

Now we are going to protect the .htaccess itself by adding the following code to the .htaccess

<Files ".htaccess">
order allow,deny
deny from all
</Files>

Try accessing the config.php file and the .htaccess file, youll end up getting a 403 Forbidden page instead of a blank white page.

Tutorial written by Brandon