Friday, October 22, 2010

Remove .svn entries from your web site

I have several websites that are managed by subversion. I didn't realize till I did a security scan of my web server that the .svn directories have been exposed to the public.

I did a search and found this code to add to my httpd.conf file.


<directorymatch .*="" .*\.svn="">
Deny From All
</directorymatch>


I added that code and restarted apache and it worked like a charm.

No comments:

Post a Comment