up vote 1 down vote favorite
share [g+] share [fb]

Since client URI requests to the server are just appended to the document root, what's to keep users from requesting things like, "../../bad_file"?

link|improve this question
feedback

1 Answer

up vote 1 down vote accepted

The Apache documentation seems to tell how this can be prevented. A good way seems to be forbidding all access by default, then accepting it under the DocumentRoot.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.