I've noticed filebrowser, active on my site in:
http://drakenfluegel.org/art/
is displaying the .htaccess files in directories even though .htaccess file is listed as a file type to hide in its config. This a bug?
I noticed that too. And i assume it must be...
It's wierd really - you can browse into the htaccess'd folders but then as soon as you go a level deeper any restrictions actually kick in. Not that thats much use if they already got your .htpasswd file and decrypted it...
Comments