Prevent template files from being downloaded

[jclarke]

Since WHMCS puts its templates in a publicly accessible location, if don't tell apache to block visitors from seeing these files, anyone can download/view your template files. If you have any custom tweaks to your template files and you don't want others to be able to view them, just add the following to your .htaccess file in the root of your WHMCS installation.

 

<Files ~ "\.tpl$">
Order allow,deny
Deny from all
</Files>

[disgruntled]

Since WHMCS puts its templates in a publicly accessible location, if don't tell apache to block visitors from seeing these files, anyone can download/view your template files. If you have any custom tweaks to your template files and you don't want others to be able to view them, just add the following to your .htaccess file in the root of your WHMCS installation.

 

<Files ~ "\.tpl$">
Order allow,deny
Deny from all
</Files>

 

 

This would be better done from within the server configs, htaccess can be bypassed

[Jowwow]

This would be better done from within the server configs, htaccess can be bypassed

expound please.

[laszlof]

This would be better done from within the server configs, htaccess can be bypassed

 

Theres no way (that I know of) to bypass Deny from all statements in .htaccess files. Apache treats .htaccess files just as it treats statements in the main httpd.conf file (with a few restrictions on usage).

 

Now if you're talking about authentication via .htaccess (Auth Basic), thats a different story.

[disgruntled]

Now if you're talking about authentication via .htaccess (Auth Basic), thats a different story.

 

I am, but there are always new ways i put no faith in htaccess at all to be fair, i use it for simple things that need url rewrites or compression but nothing critical