Webmaster Sucks » uploaded file security http://www.webmastersucks.com Here I share stuff I used to suck at as a novice webmaster.. Mon, 13 Jun 2011 06:39:43 +0000 http://wordpress.org/?v=2.9.2 en hourly 1 Image Directory Security with htaccess http://www.webmastersucks.com/image-directory-security-with-htaccess/ http://www.webmastersucks.com/image-directory-security-with-htaccess/#comments Fri, 19 Jun 2009 16:14:05 +0000 admin http://www.webmastersucks.com/?p=179

Image DirectorySome hackers or attackers try to upload script files in image upload files and they can see and change your files with that script. You can block this type file in that directories. You can forbidden type of files and close execution of CGI.

.htaccess

# secure directory by disabling script execution
AddHandler cgi-script .php .pl .py .jsp .asp .htm .shtml .sh .cgi .aspx
Options -ExecCGI

From: http://perishablepress.com/press/2006/01/10/stupid-htaccess-tricks/#sec16

]]> http://www.webmastersucks.com/image-directory-security-with-htaccess/feed/ 2