CodeIgniter Forums

Full Version: Hoster and CodeIgniter 4.0.0-rc.3
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
I am working on a new project with CI4 (4.0.0-rc.3), because the first release version is nearĀ  Big Grin

There were no problems with the local installation with xampp. When I wanted to install the project at two different hosters, there were always problems with the .htaccess file in the public folder. Has anyone noticed that yet?

1st error: Option All not allowed here
"Options All indices" must be changed to "Options indices".

2nd error: Option FollowSymlinks not allowed here
"Options +FollowSymlinks" must be changed to "Options +SymLinksIfOwnerMatch".


Both hosters say: In your .htaccess file use the statement "FollowSymLinks". This statement is insecure and therefore disabled on the host.
Does it make sense to include these changes in CI4?

Thanks
Tom
Can you share hosting software and version? If this is a new standard then the framework should definitely be updated. I'm only peripherally familiar with htaccess configurations...
Each hosting provider has their own ways of what is allowed and not allowed in .htaccess etc;

There is no general rule for an .htaccess file.
The symlink vulnerability has been known for several years. Here is an article from 2015 that's one of the best I've found for explaining the issue.

Here is another excellent explanation of the problem.