Jump to content

Security issues with files that must be not accessible


ZMD

Recommended Posts

Hi there,

We got following alerts:

 

Some directories in the Revive Adserver package are not supposed to be served by your webserver directly, for security reasons. Leaving such files and directories accessible might disclose unwanted information and pose a security threat. A quick security check has been run and you will find the results below.


   

error.gif  Your browser was able to fetch some files that should not be accessible. For example:

  • var/INSTALLED
  • var/cache/README.txt
  • etc/database_action.xml
  • plugins/etc/openXDeliveryLog.xml
  • lib/RV.php

 

What we should do with these files? We tried to set their permissions to 644 - it didn't work solving the alert.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...