PDA

View Full Version : unathorized template access - fix


seothatworks
12-14-2005, 09:05 AM
I learned about this issue from Gerwin on another forum - thanks to him.

If you have custom modified template in your directory, it shall probably bother you that Smarty engine allows direct browser access to template files, so that anyone can see the source code.

The fix is to ad the following to the .htaccess in the templates folder:

Content visible to registered users only.

FB
12-14-2005, 10:02 AM
There is no .htaccess file in the templates folder...only the main phpLD folder.

seothatworks
12-14-2005, 10:11 AM
Just create one.

Btw. you shall probably only be bothered if you have some custom design that you wouldn't like to give out to others so easily. I don't think there shall be any security issues involved.