4 ms·
I'm curious how the /_h5ai/ directory is hidden. I can see that I get a 403 at https://release.larsjung.de/_h5ai/private/conf/options.json https://release.larsj
by kevincox 3y ago
I'm curious how the /_h5ai/ directory is hidden. I can see that I get a 403 at https://release.larsjung.de/_h5ai/private/conf/options.json https://release.larsjung.de/_h5ai/private/conf/options.json but don't see any mention of adding this rule in the setup instructions.
PHP just slapping the code into the public directory always makes me nervous, especially when this has an upload feature.
- extraduder_ire 3y agoI think it's hardcoded into h5ai. I am not logged into github, so I can't use regular code search, but it seems to refuse to serve anything under $APP_PATH.
- kevincox 3y agoI might be misunderstanding. But the instructions just say to set it as a fallback index. So I don't think its own code would run if you requested these files directly because they exist. > Add /_h5ai/public/index.php (note the leading slash!) to the end of the default index-file list. In this way h5ai will manage all directories in and below DOC_ROOT that don't have a index file.