Re: Web directories attacked with bad .htaccess

2006-01-27 Thread Vladislav Kurz
On Friday 27 January 2006 11:59, Ramon Acedo wrote: > Hello, Hello > As a measure I changed 777 to www-data owner + 755: > > find . -perm 777 -exec chmod 755 {} \; -exec chown www-data {} \; > > Where . was DocumentRoot chown www-data is IMHO bad idea. Apache/CGI/PHP will still have full (read/

Web directories attacked with bad .htaccess

2006-01-27 Thread Ramon Acedo
Hello, In an up-to-date Debian Sarge box yesterday I found a lot of bad .htaccess looking like this: Options -MultiViews ErrorDocument 404 //foldername/time.php I found that many of them where located in 777 directories like the smarty templates_c. Not all of them though. It has been a system wi