Page 1 of 1

vqmod security

Posted: Tue Aug 07, 2012 5:52 pm
by al404
Hi i would like to know if some step is needed to make vqmod directory secure
should i remove install directory?
should i live only vqcache on production server?
should i .htaccess on production server?

Re: vqmod security

Posted: Tue Aug 07, 2012 7:03 pm
by uksitebuilder
1. Install does not need to be removed. If run after already being installed, it will skip installation
2. No vqmod requires all files/folders
3. You can password protect the directory (prebably noly the xml directory needs protecting (I have not tested this though).

Re: vqmod security

Posted: Tue Aug 07, 2012 8:03 pm
by rph
It already comes with an .htaccess protecting scripts.

Re: vqmod security

Posted: Tue Aug 07, 2012 8:07 pm
by al404
yes but mine just says

# Prevent Directoy listing
Options -Indexes

if you know vqmod folders and plugins you can still try to hack them

Re: vqmod security

Posted: Tue Aug 07, 2012 8:23 pm
by rph

Re: vqmod security

Posted: Tue Aug 07, 2012 8:26 pm
by al404
ok thaks, this seems much better :-)