Protected Directories Completely misses Directory Restriction

Submitted by kenlyle on Fri, 11/06/2009 - 16:23

OK, I was trying to get support on WHMCS from WHMCS. The guy was getting a 403.

I clicked the Protected Directories link in the domain in Virtualmin.

For my WHMCS billing directory, it told me: ""Skipping /blah/blah/blah/admin/.htaccess because it does not protect the directory".

BUT in the file, there is a Deny from All, and an Allow from .comcast.net

That should be considered a form of directory protection, I think, because it is.

Agree or not?

Thanks, Ken

Status: 
Closed (fixed)

Comments

Submitted by JamieCameron on Fri, 11/06/2009 - 17:33

Does the .htaccess file have both a require and AuthUserFile directives? That is what Virtualmin looks for..

The Protected Directories module is for setting up password protection, not IP-based access control.

Submitted by kenlyle on Fri, 11/06/2009 - 19:17

Thanks! Call it user error, then. I misunderstood.

But, please consider that IP based access control seems to me quite related. It also seems that if you come up with a few Deny/Allow, etc. that those might apply to more than one domain, so the GUI approach of having access to all the .htaccess files together, and allowing cut/paste might be nice.

Just close this if I am not making any sense.

Thanks, Ken

Submitted by JamieCameron on Fri, 11/06/2009 - 19:20

That's a nice idea for a feature .. I'll keep it in mind.

Submitted by Issues on Sat, 11/21/2009 - 11:19

Automatically closed -- issue fixed for 2 weeks with no activity.