</i><FilesMatch ".">
order allow,deny
deny from all </FilesMatch></i>
And I've tried accessing f.ex. a ini file directly and it's not possible, so I guess this should be OK.
<b>But now I've got the trailing slash problem</b>, and yes I have tried Ekkehard's suggestions found in this thread: http://ez.no/community/forum/install_configuration/htaccess_hidden_at_last
Hmm .. think I have a workaround, it's not pretty but I think it does the job.
The trailing slash problem is caused by the rewrite rule. The .htaccess shown below will deny access to certain kind of filetypes, it's a bit vulnerable as you have to provide all the file extensions by hand ...
If someone provides a more robust solution for this I would be pleased :)
php_value allow_call_time_pass_reference 0
<FilesMatch "\.(txt|tp|tlp|cache|info|sql|ini|php|sh|pdf|log|LOG|tr|ttf|ts|xml|cpp)">
order allow,deny
deny from all
</FilesMatch>
<FilesMatch "(index\.php|\.(gif|jpe?g|png|css|js|html)|var(.+)storage.pdf(.+)\.pdf)$">
order allow,deny
allow from all
</FilesMatch>
RewriteEngine On
#RewriteRule !\.(gif|jpe?g|png|css|js|html)|var(.+)storage.pdf(.+)\.pdf$ index.php
DirectoryIndex index.php
What version of apache are you using with eZ publish.
I had the very same problem with eZ publish 3 (or greater) on Apache 2 in a couple of specific instances over the last year.
So I wrote up a report, not exactly sure just what's going on ... http://ez.no/community/bugs/ezurloperator_php_incompatibility_with_apache2
I also posted to the sdk-public list:
http://lists.ez.no/pipermail/sdk-public/2005-May/001279.html http://lists.ez.no/pipermail/sdk-public/2005-May/thread.html#1279
//kracker <i>Aesop Rock : Labor Day : Save Yourself</i>