aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorIgor Wiedler <igor@wiedler.ch>2011-03-23 23:06:55 +0100
committerIgor Wiedler <igor@wiedler.ch>2011-03-23 23:13:52 +0100
commitae8131077ef8a4c75c0582b47c871ca0c81ef2ef (patch)
tree5b51c831797ab52ea9ad81259b458c9aa334dc7d
parent200c7e3c446aaa95397ac379f6eb2aa3b620ccd6 (diff)
downloadforums-ae8131077ef8a4c75c0582b47c871ca0c81ef2ef.tar
forums-ae8131077ef8a4c75c0582b47c871ca0c81ef2ef.tar.gz
forums-ae8131077ef8a4c75c0582b47c871ca0c81ef2ef.tar.bz2
forums-ae8131077ef8a4c75c0582b47c871ca0c81ef2ef.tar.xz
forums-ae8131077ef8a4c75c0582b47c871ca0c81ef2ef.zip
[ticket/10107] Add a webserver section to docs/INSTALL.html
Explain what to do with lighttpd and nginx after installing phpBB on one of those webservers. PHPBB3-10107
-rw-r--r--phpBB/docs/INSTALL.html7
1 files changed, 7 insertions, 0 deletions
diff --git a/phpBB/docs/INSTALL.html b/phpBB/docs/INSTALL.html
index 4af185beb3..3cd0e215c3 100644
--- a/phpBB/docs/INSTALL.html
+++ b/phpBB/docs/INSTALL.html
@@ -79,6 +79,7 @@
<li><a href="#postinstall">Important (security related) post-Install tasks for all installation methods</a>
<ol style="list-style-type: lower-roman;">
<li><a href="#avatars">Uploadable avatars</a></li>
+ <li><a href="#webserver_configuration">Webserver configuration</a></li>
</ol>
</li>
<li><a href="#disclaimer">Disclaimer</a></li>
@@ -408,6 +409,12 @@
<p>Please be aware that setting a directories permissions to global write access is a potential security issue. While it is unlikely that anything nasty will occur (such as all the avatars being deleted) there are always people out there to cause trouble. Therefore you should monitor this directory and if possible make regular backups.</p>
+<a name="webserver_configuration"></a><h3>6.ii. Webserver configuration</h3>
+
+ <p>Depending on your web server you may have to configure your server to deny web access to the <code>files/</code> and <code>store/</code> directories. This is to prevent users from accessing private attachments and database backups.</p>
+
+ <p>For apache there are <code>.htaccess</code> files already in place to do this for you. For other webservers you will have to adjust the configuration yourself. There are sample configuration files for <em>lighttpd</em> and <em>nginx</em> in the <code>docs/</code> directory.</p>
+
</div>
<div class="back2top"><a href="#wrap" class="top">Back to Top</a></div>