Problem reading htaccess

[wireghoul]

Problem reading htaccess

[wireghoul]

Which of the htaccess attacks were you using? I'm guessing you received a 401 authentication challenge before making the change? Adding the require directive shouldn't cause any issues on most cases, but I'd like to reproduce it locally for further testing if I can.

Thanks and your welcome :)

[thesur]

Hello wireghoul,

It happends with any htaccess attack. What is happening is that in my default apache config there is this directive:

(Files ".ht*")
Require all denied
(/Files)

So, even if the .htaccess has 'allow from all' directive I would still get a 403 error. So, what I did to have a more standard readable htaccess is using the next directive:

(Files ~ "^.ht")
Order allow,deny
Allow from all
Require all granted
(/Files)

Let me know if you're not able to reproduce this behaviour locally.

Thanks!

[wireghoul]

Thanks! That's exactly the information I was after. This is a change in 2.4. I will test it against older configurations to ensure it doens't break anything and update the attacks accordingly.

[wireghoul]

Gradually working this into the codebase with an annotaion. Thanks for reporting it.