Author Topic: Mibew installation  (Read 4671 times)

0 Members and 1 Guest are viewing this topic.

smecca

  • Jr. Member
  • **
  • Posts: 2
Mibew installation
« on: March 04, 2015, 12:40:19 PM »
Checked server error log on installation of messenger. Server forced us to change htaccess:

# Disable directory listing
#Options -Indexes <-------disabled in comment

# Follow symbolic links in the directory
# Options +FollowSymLinks <-------- disabled in comment

My question is:
Its ok or its gone insecure to leave this settings?
Or anyway what have changed in mibew operations?

Thank you in advance for answers

faf

  • Mibew Staff Member
  • Native
  • *****
  • Posts: 950
    • Mibew Messenger
Re: Mibew installation
« Reply #1 on: March 04, 2015, 04:00:27 PM »
Well, while disabling FollowSymLinks option should not cause any troubles, enabling Indexes could result in information disclosure.

smecca

  • Jr. Member
  • **
  • Posts: 2
Re: Mibew installation
« Reply #2 on: March 04, 2015, 10:22:40 PM »
I could imagine it faf.

I write here error log:

/[Wed Mar 04 23:17:36 2015] [alert] [client xx.x.xx3.1xx:xxxx] - xxx.xx - /web/htdocs/www.xxx.xx/home/xxx_chat/.htaccess: Option Indexes not allowed here, referer http://www.xxx.xx/

Can you give some hints, please?

faf

  • Mibew Staff Member
  • Native
  • *****
  • Posts: 950
    • Mibew Messenger
Re: Mibew installation
« Reply #3 on: March 05, 2015, 11:32:29 AM »
What kind of hints do you need?

Looks like you're using Mibew Messenger on some virtual hosting and you're not allowed to override the options set for virtual hosts. Obviously, in that case the limitations of the hosting is out of your control, there is nothing you can do about that.

Maybe the administration of the hosting has already switched off the Indexes option in the configuration of Apache. You can check it by manually requesting (for example) the index of files directory: http://<path to mibew root>/files/.