Welcome Guest, Not a member yet? Register   Sign In
Hoster and CodeIgniter 4.0.0-rc.3
#1

I am working on a new project with CI4 (4.0.0-rc.3), because the first release version is near  Big Grin

There were no problems with the local installation with xampp. When I wanted to install the project at two different hosters, there were always problems with the .htaccess file in the public folder. Has anyone noticed that yet?

1st error: Option All not allowed here
"Options All indices" must be changed to "Options indices".

2nd error: Option FollowSymlinks not allowed here
"Options +FollowSymlinks" must be changed to "Options +SymLinksIfOwnerMatch".


Both hosters say: In your .htaccess file use the statement "FollowSymLinks". This statement is insecure and therefore disabled on the host.
Does it make sense to include these changes in CI4?

Thanks
Tom
Reply
#2

Can you share hosting software and version? If this is a new standard then the framework should definitely be updated. I'm only peripherally familiar with htaccess configurations...
Reply
#3

Each hosting provider has their own ways of what is allowed and not allowed in .htaccess etc;

There is no general rule for an .htaccess file.
What did you Try? What did you Get? What did you Expect?

Joined CodeIgniter Community 2009.  ( Skype: insitfx )
Reply
#4

(This post was last modified: 11-17-2019, 10:34 AM by dave friend.)

The symlink vulnerability has been known for several years. Here is an article from 2015 that's one of the best I've found for explaining the issue.

Here is another excellent explanation of the problem.
Reply




Theme © iAndrew 2016 - Forum software by © MyBB