SMF bug 4961 (no index.php or .htaccess file when new attach folder made)

Arantor

  • As powerful as possible, as complex as necessary.
  • Posts: 14,278
This is an interesting one, if you use a new folder to store attachments in.

I don't know if Aeva does anything like that when making a new album folder, but it might be interesting to note whether it does or not. If it does, the .htaccess file is going to be different.

In fact, now that I think about it, that's not a bad idea even for Aeva - provided there is a rule to determine between thumbnails and regular files: thumbnails do not need to be blocked from being served but regular attachments probably should (so they're pushed through the code layer instead)
There's also a related bug in SMF about the cache folder where it won't reinstate the index.php or .htaccess files if removed from the top level cache folder.

What it might also be worth doing is setting up a web.config file for IIS which works in a similar way as I understand it (need to talk to some IIS folks about that, really - it isn't common but it should be handled if possible)
When we unite against a common enemy that attacks our ethos, it nurtures group solidarity. Trolls are sensational, yes, but we keep everyone honest. | Game Memorial

Nao

  • Dadman with a boy
  • Posts: 16,079

Arantor

  • As powerful as possible, as complex as necessary.
  • Posts: 14,278

Nao

  • Dadman with a boy
  • Posts: 16,079

Arantor

  • As powerful as possible, as complex as necessary.
  • Posts: 14,278

Nao

  • Dadman with a boy
  • Posts: 16,079