Welcome Guest, Not a member yet? Register   Sign In
403 files in controllers, libraries, models, views folders
#1

[eluser]AtlantixMedia[/eluser]
Hello,

is it necessary to have 403 html files in those folders and any subfolders to prevent directory access? I have a custom setup where a 404 splash page is served when a page is not found which seems to be a lot better and more anonymous than a 403 error. which one is considered best practice?

thanks
#2

[eluser]xwero[/eluser]
I think it's more a precaution against open dirs than a necessity. If you keep the framework above the root the files have no purpose.




Theme © iAndrew 2016 - Forum software by © MyBB