Default ht.access Question

The default ht.access file that comes with Modx 2.0.8 has this:



What does that do? Should I keep or remove it? Apologies if this has been asked before, I couldn’t find the answer by searching.

Edit: Just noticed I pulled the one from Core instead of Root. I guess that is important to protect the core directory.

I think it’s to stop attacks on .php files

You probably know this, but for other readers of this thread: you have to rename it to .htaccess in order for it to have any effect. ht.access means nothing to the server -- it’s just another file.

I don’t see that code in the default ht.access file (https://github.com/modxcms/revolution/blob/develop/ht.access)

If that code was in the file you may want to consider downloading the zip again (from the modx site), to make sure it hasn’t been tampered with.

Quote from: AMDbuilder at Apr 28, 2011, 11:14 PM

I don’t see that code in the default ht.access file (https://github.com/modxcms/revolution/blob/develop/ht.access)

If that code was in the file you may want to consider downloading the zip again (from the modx site), to make sure it hasn’t been tampered with.

Just downloaded 2.0.8 and can confirm it’s not part of the standard ht.access however it is in the ht.access in the core folder

Quote from: paulp at Apr 29, 2011, 04:29 AM

Quote from: AMDbuilder at Apr 28, 2011, 11:14 PM

I don’t see that code in the default ht.access file (https://github.com/modxcms/revolution/blob/develop/ht.access)

If that code was in the file you may want to consider downloading the zip again (from the modx site), to make sure it hasn’t been tampered with.

Just downloaded 2.0.8 and can confirm it’s not part of the standard ht.access however it is in the ht.access in the core folder

Ah, that would make sense. The core folder should be above public_html or if you can’t do that you should block all web access to the folder (which is what the code in question does). I always put core above public_html so I never look at that ht.access file.