View Issue Details

IDProjectCategoryView StatusLast Update
0000899OXID eShop (all versions)4.07. Source code, Testpublic2012-12-10 13:45
Reportermarco_steinhaeuser Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status resolvedResolutionfixed 
Product Version4.1.2 revision 18998 
Fixed in Version4.1.6 revision 22740 
Summary0000899: *.tpl-files are accessable
DescriptionFrom version 4 on, the tpl files are accessible directly pointing the URL:
http://demoshop.oxid-esales.com/community-edition/out/basic/tpl/start.tpl

The reason for it is the missing .htaccess file (in comparison to version 3) with this content:

# deny access to tpl files
<Files *.tpl>
Order Deny,Allow
Deny from all
</Files>
# deny access to php files
<Files *.php>
Order Deny,Allow
Deny from all
</Files>
# try to avoid execution of cgi
Options -ExecCGI
TagsNo tags attached.
Theme
BrowserAll
PHP Version5.2.6
Database Version5.0.33

Activities

arvydas_vapsva

2009-08-21 16:21

reporter   ~0001484

applied only this fix:

# deny access to tpl files
<Files *.tpl>
Order Deny,Allow
Deny from all
</Files>

last two are not ok