+- CodeIgniter Forums (https://forum.codeigniter.com)
+-- Forum: CodeIgniter 4 (https://forum.codeigniter.com/forumdisplay.php?fid=28)
+--- Forum: CodeIgniter 4 Support (https://forum.codeigniter.com/forumdisplay.php?fid=30)
+--- Thread: Hoster and CodeIgniter 4.0.0-rc.3 (/showthread.php?tid=74850)
Hoster and CodeIgniter 4.0.0-rc.3 - SirTom - 11-15-2019
I am working on a new project with CI4 (4.0.0-rc.3), because the first release version is near
There were no problems with the local installation with xampp. When I wanted to install the project at two different hosters, there were always problems with the .htaccess file in the public folder. Has anyone noticed that yet?
1st error: Option All not allowed here
"Options All indices" must be changed to "Options indices".
2nd error: Option FollowSymlinks not allowed here
"Options +FollowSymlinks" must be changed to "Options +SymLinksIfOwnerMatch".
Both hosters say: In your .htaccess file use the statement "FollowSymLinks". This statement is insecure and therefore disabled on the host.
Does it make sense to include these changes in CI4?
Thanks
Tom
RE: Hoster and CodeIgniter 4.0.0-rc.3 - MGatner - 11-17-2019
Can you share hosting software and version? If this is a new standard then the framework should definitely be updated. I'm only peripherally familiar with htaccess configurations...
RE: Hoster and CodeIgniter 4.0.0-rc.3 - InsiteFX - 11-17-2019
Each hosting provider has their own ways of what is allowed and not allowed in .htaccess etc;
There is no general rule for an .htaccess file.
RE: Hoster and CodeIgniter 4.0.0-rc.3 - dave friend - 11-17-2019
The symlink vulnerability has been known for several years. Here is an article from 2015 that's one of the best I've found for explaining the issue.
Here is another excellent explanation of the problem.