Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Latest post by nicholas on Friday, 08 March 2013 04:45 CST
Hi,
This is an issue related to the htaccess creator. The CSS of MaviK thumnails comes via a phpfile..
/plugins/content/mavikthumbnails/style.php?base=http://yourdomain.com
I have added this is the direct access allowed section for both the file & the folder. However i am still getting a 403
Note that if i remove the appended ?base=http://yourdomain.com , it works. Can you help ?
https://techjoomla.com | @techjoomla
You also need to disable the "Protect against common file injection attacks" option in the .htaccess Maker
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Hey Nic,
I feared so.. Is there no workaround ? I would rather not disable that.. Modifying the plugin might be a better idea ?
https://techjoomla.com | @techjoomla
The best way would, of course, be modifying the plugin so that it doesn't use full arbitrary URLs (they are always a HUGE security risk). Actually, using a direct access PHP file is already a huge security risk. If you're going to use a direct access PHP, at least use JApplicationWeb to load a Joomla! environment which will give you access to JURI, therefore removing the necessity of specifying the base URL inside the URL which calls that PHP file.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.
Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!