Without adjusting any settings in the past few months, it seems that IMCE upload directories for my users are now showing files like:

includes.php, configs.php, guest.php

Can anyone shed light on why these are there. If they are meant to be there, why are they visible now? Is this to do with .htaccess? Any help would be appreciated. Thanks.

Comments

ufku’s picture

ufku CreditAttribution: ufku commented

IMCE does not allow upload of php files. Besides these files don't belong to Drupal. They may be remains of another script you installed.

ufku’s picture

ufku CreditAttribution: ufku commented
Status: Active » Closed (fixed)

Closing 6.x-1.x issues as this branch is no more supported.