Menu

Topic-icon HTAccess Protection Items turned off

  • azurelinksc
  • azurelinksc's Avatar Topic Author
  • Offline
  • Senior Member
  • Senior Member
More
4 months 5 days ago #8245 by azurelinksc
HTAccess Protection Items turned off was created by azurelinksc
Hi Jose,
This is weird, but every so often when I'm checking a site's .htaccess protection in Securitycheck Pro, various items which were protected are set to no and the green bar is not displaying meaning it hasn't been applied to the .htaccess file. What might be the cause of this?
The Malware scan doesn't reveal anything.

Please Log in or Create an account to join the conversation.

More
4 months 5 days ago #8246 by Jose
Replied by Jose on topic HTAccess Protection Items turned off
Hi azurelink,

That means the .htacess file into root folder has been modified. Did the file integrity report any change? Did you do any change in the server like changing PHP version? Sometimes that overwrite the .htacess.

Regards,
Jose

Please Log in or Create an account to join the conversation.

  • azurelinksc
  • azurelinksc's Avatar Topic Author
  • Offline
  • Senior Member
  • Senior Member
More
4 months 5 days ago #8247 by azurelinksc
Replied by azurelinksc on topic HTAccess Protection Items turned off
Yes, for the site in question I did change the PHP version from 7.1.x to 7.3.23. And this site does use Multiphp Manager so it does add PHP handler code to the htaccess file. Would that disable SCP?

Please Log in or Create an account to join the conversation.

More
4 months 5 days ago #8248 by Jose
Replied by Jose on topic HTAccess Protection Items turned off
If the file was overwritten then yes, it disables all .htacess protection features like backend protection, security headers and so.

Regards,
Jose

Please Log in or Create an account to join the conversation.

  • azurelinksc
  • azurelinksc's Avatar Topic Author
  • Offline
  • Senior Member
  • Senior Member
More
2 months 3 weeks ago #8326 by azurelinksc
Replied by azurelinksc on topic HTAccess Protection Items turned off
I've also noticed that when I changed the various items from "No" back to "Yes" and click "Protect" SCP writes a whole new set of SCP instructions below the previous set. In some cases, this results in 3 or 4 repetitions of SCP instructions in the .htaccess file. What would be the correct procedure to avoid this? Should I just start with a clean new htaccess.txt file from the current Joomla versions and re-protect? Or is there some other method you suggest? (I guess I assumed SCP would read the file and only add the updates to it.)

Please Log in or Create an account to join the conversation.

More
2 months 3 weeks ago #8327 by Jose
Replied by Jose on topic HTAccess Protection Items turned off
Hi azurelink,

The best method is save the changes, delete the .htacess (there is a button to do that) and then click on the 'Protect' button. I tried to implement a reliable way to change settings but I didn't find it.

Regards,
Jose

Please Log in or Create an account to join the conversation.

Time to create page: 0.091 seconds
Powered by Kunena Forum

Login or Sign In