[support] .htaccess file in files folder

Gerhard Killesreiter gerhard at killesreiter.de
Mon Aug 7 12:33:07 UTC 2006


Kobus Myburgh wrote:

> I will try the # method the moment that it gets created again, but that
> file was added there for a purpose, so disabling the content may
> introduce a security risk for the site, right?

The sec hole would only exist if running apache.

> 
> It is indeed strange, and I didn't know that IIS cared about the file
> in there, but when I deleted it, the images showed up correctly.

Are you sure you run IIS? If you maybe run apache in disguise, you might 
be affected by this bug:

http://drupal.org/node/67244

Cheers,
	Gerhard


More information about the support mailing list