Hi, i could not install the newest basic installation of drupal without deleting the .htaccess file. I need to know how important this .htaccess file was. I still have it in my computer, i have a webhost. Please dont ask me to try modify the .htaccess file. I have been reading these forums here and tryed everything. Seems, that my host denies all or at least most of commands in this file. And dont suggest me new hosts either... i like this one (many CMS-s dont use .htaccess).

So, how secure is Drupal without .htaccess file ?
Can i run it without .htaccess without geting hacked ?

Comments

jo1ene’s picture

The file is not important from a functionality perspective. It defines a few PHP options, but Drupal will run fine without it. There are a few "security" settings in the file, but there's no significant security risk in removing it. If you are concerned about folks seeing your directory contents, which is what the .htacess file prevents, you can put an empty index.html file in each of the directories which will stop them from seeing the listing. They could still see a file, but they would need to know what to look for in the first place. The .htaccess doesn't do anything to prevent "hacking" of any kind.

Advanced Web Design

smilodon’s picture

Thank you for fast reply... i really appreciate this.
I think im gonna try this CMS to the limits now.

andre75’s picture

You will not be able to:
-Use clean URL's (google really likes those)
-Prevent hotlinking, directory browsing
-Have custom error pages
-do easy 301 redirects

and a bunch more. Not supporting .htaccess was the main reason why I switched hosts.

Andre

-------------------------------------------------
http://www.opentravelinfo.com
http://www.aguntherphotography.com

smilodon’s picture

My host has its own error pages. It has a forced banner on my website. And many more bad things. But its for free and the space/bandwith/cp are all just made for me.

jo1ene’s picture

This is not entirely true. You may need to contact your host to set these things up but it can be done. BTW, Google doesn't care a lick about what your paths look like.

Advanced Web Design

andre75’s picture

But google cares about keywords. If they show up in the url all the better. I am not up to speed on recent search engine development, so I don't know if they still have trouble browsing sites with ?q= but they know the difference between:
?q=node/19
and
/somethingmeaningful/somethingevenbetter/somethingreallygood
Especially when you are targeting those words.

-------------------------------------------------
http://www.opentravelinfo.com
http://www.aguntherphotography.com

Maniac8888’s picture

"BTW, Google doesn't care a lick about what your paths look like."

Technically that is true. However, your site won't index worth a crap if your links are malformed. What Google really cares about (from a ranking standpoint) is having keywords in your links. That is why clean URLs are so important (if you want high site rankings that is).

jo1ene’s picture

OK. If you think it's important. In my experience, paths have a miniscule effect in the realm of keywords and plenty of pages with odd-looking paths rank quite well if there is content worth ranking.

Advanced Web Design