XF 1.2 JS Error - unknown

[tommydamic68]

could anyone identify why I would get this error?

 

[tommydamic68]

You have 30+ errors from MicroCart

2 that concern me the most are

ErrorException: rename
ErrorException: fsockopen()

yes - I am aware of all of these and know why they had happened, never emptied the server error files - thanks.

 

[tommydamic68]

hows about that htaccess file you mentioned?

 

[Adam Howard]

where do i add this exactly? is the htaccess file that is.

You should have that in your root htacess (on top)

You also should have a lot of empty index.html files in key places such as /js/ for example, but you don't. I can navigate every folder on your site right now and browse / download every file.

That is a security issue. And it is one I have seen a few times from other people here....

You told me who your host is (Hostgator). I would recommend you move.

 

[tommydamic68]

You should have that in your root htacess (on top)

You also should have a lot of empty index.html files in key places such as /js/ for example, but you don't. I can navigate every folder on your site right now and browse / download every file.

That is a security issue. And it is one I have seen a few times from other people here....

You told me who your host is (Hostgator). I would recommend you move.

Are you saying the is a security issue due to my host or Xenforo? On a second note, you mentioned adding to my httacess file - would that prevent this?

 

[Adam Howard]

Are you saying the is a security issue due to my host or Xenforo? On a second note, you mentioned adding to my httacess file - would that prevent this?

This has nothing to do with XenForo. This has to do with your configuration.

In your /library/ folder add this to htaccess

Order deny,allow
Deny from all

 

[tommydamic68]

This has nothing to do with XenForo. This has to do with your configuration.

In your /library/ folder add this to htaccess

Order deny,allow
Deny from all

how are you accessing this?

 

[Paul B]

The directory is unprotected: http://www.sphynxlair.com/community/js/

Unlike here: http://xenforo.com/community/js/

 

[Adam Howard]

how are you accessing this?

YOUR URL /community/js/

You're missing all the blank index.html files. And your htaccess is also allowing it

 

[tommydamic68]

This has nothing to do with XenForo. This has to do with your configuration.

In your /library/ folder add this to htaccess

Order deny,allow
Deny from all

FYI. It already is.

 

[Adam Howard]

FYI. It already is.

View attachment 63120

Was not working a moment ago

 

[tommydamic68]

Even with that, I can still access it….?

 

[tommydamic68]

I have an htaccess file in my root as well, could this be the issue?

 

[Andrej]

In your /library/ folder add this to htaccess

Order deny,allow
Deny from all

What has /library to do with /js folder?
The proper solution is to simply create a blank index.html page in the /js folder.

 

[Adam Howard]

Even with that, I can still access it….?

Re-upload XenForo. That will restore all the "filler" index files.

Add this to your root htaccess (may as well add it to your site's htaccess as well)

Options -Indexes

 

[Adam Howard]

What has /library to do with /js folder?
The proper solution is to simply create a blank index.html page in the /js folder.

They don't.

2 problems, 1 thread

Order deny,allow
Deny from all

^^ This is for /library/ because I could browse it.

And this is for general

Options -Indexes

And I've already, repeatedly said he needs to re-apply the empty index.html files

Try to keep up

 

[tommydamic68]

there is one there already…?

 

[tommydamic68]

Re-upload XenForo. That will restore all the "filler" index files.

Add this to your root htaccess (may as well add it to your site's htaccess as well)

Options -Indexes

just add to the top of the file is fine?

 

[Adam Howard]

just add to the top of the file is fine?

Yes, but you also want to add the filler / blank index.html files.

There should be a bunch of them, but you're missing them.

 

[tommydamic68]

I added it , now when clicking http://www.sphynxlair.com/community/js/ i get this below unlike just the blank page for xenforo http://xenforo.com/community/js/

 

[tommydamic68]

there is one there already…?

View attachment 63122

And why is this blank index not good that is already in the js folder, just curious.