[Owncloud] Question about security

[Jakob Sack]

Hi,

there are two options that come to my mind.
a) using a data folder location outside the webroot (possible if you have root 
access to the webserver)
b) creating a .htaccess with the appropriate rights (order allow deny, deny 
from all)

The second option is the one all can use, including the users of a shared 
webhosting service. Maybe the creation of this file can be done by owncloud.
Regards,

Jakob


Am Mittwoch, 11. August 2010, 00:02:15 schrieb Pauleman (DerPaul):
> Hello all,
> 
> just for fun I tested to download a file directly from the data location
> of owncloud. I was surprised that there was no protection of the data
> directory and also of the backup directory. Is there any idea to prevent
> the direct access?
> 
> Regards
> 
> Pauleman