Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.The provided patch adds some more files and directories which will be protected by the default Drupal .htaccess file.
First, lots of files and directories used by Subversion (svn), as I keep all my Drupal installations under version control (and Drupal might switch to svn later, too). The database/ directory and *.mysql and *.pgsql, because nobody needs to access those from the web. I removed the update/ directory from the list, there's no such directory in CVS or 4.6., so I guess it's obsolete.
| Comment | File | Size | Author |
|---|---|---|---|
| #13 | protectsvn6.patch | 734 bytes | jvandyk |
| #9 | htaccess-svn-7.x.patch | 771 bytes | lilou |
| #8 | 28776_svn_htaccess.patch | 745 bytes | morbus iff |
| #7 | 28776_svn_htaccess.patch | 745 bytes | morbus iff |
| htaccess_4.patch | 895 bytes | Uwe Hermann |
Comments
Comment #1
praseodym commentedFor me .htaccess directory blocking is broken. directory/ is blocked, while directory/file.txt is not. It's clearly ineffective.
Comment #2
morbus iffNo patch attached.
Comment #3
morbus iff-1. When and if Drupal ever uses svn, it'll add this stuff in - until then, it shouldn't cater to your environment. As for database/, it's as innocent as someone requesting CHANGELOG.txt, and has no reason for being blocked. The only thing worthwhile from this patch is the removal of updates - because that's already covered with the .inc. Note: this has nothing to do with directories, only [Files].
Marking as duplicate, see final patch/revisions at http://drupal.org/node/29344.
Comment #4
Uwe Hermann commentedOK, you're probably right. Marking as postponed.
Comment #5
Wesley Tanaka commentedsubscribing
Comment #6
gábor hojtsyAgreed that SVN directories and files should be blocked. (Possibly even backport to Drupal 6.x).
Comment #7
morbus iffNew patch against HEAD. Note that the original patch included mostly directories - Apache's FilesMatch (or Files) have never worked against directories. From the original patch, only .svn-base, entries, and format are valid. Also included in this patch is "all-wcprops".
Comment #8
morbus iffCorrecting typo.
Comment #9
lilou commentedReroll
Comment #10
damien tournoud commentedA lot of us already use SVN to manage Drupal sites. I'm for this to go in right now.
Comment #11
dries commentedCommitted to CVS HEAD. Thanks.
Comment #12
Anonymous (not verified) commentedAutomatically closed -- issue fixed for two weeks with no activity.
Comment #13
jvandyk commentedPatch for Drupal 6.
Comment #14
gábor hojtsyLooks good to me, pending on feedback from http://lists.drupal.org/pipermail/development/2008-November/031378.html
Comment #15
gábor hojtsyThanks, committed to Drupal 6 given no further pressing needs coming up from that thread. Moving to 5.x.
Comment #16
drummCommitted to 5.x.