[Ken Rich]

djmerlyn:

Open the .htaccess file in your jamroom directory in your favorite editor. Add this to the top of the file; Options -indexes Save and close. Done.

Thank-you. Just so I know I didn't do something noobish and screw this up, can you humor me for just a moment.

I did a search for.htaccess and got 250 hits. I assumed you meant the one in public_html, not root, or anywhere else.

I added the entry, however I noticed another entry about following symlinks. I thought symlinks were the bad thing the hacker did. Is that line supposed to be there?

# $Id: sefjam_htaccess,v 1.1.1.1 2010/04/18 15:24:50 bigguy Exp $
#-----------------------------------------
Options -indexes
Options +FollowSymLinks
Options -MultiViews
RewriteEngine On


_________________
Ken

[Brian]

You can remove that option from your .htaccess file as long as the System Config -> File and Directory Settings -> Use Directory Links is set to "no".

Hope this helps!

- Brian


_________________
Make sure and check out:
* The Jamroom FAQ
* The Jamroom Documentation

[Ken Rich]

bigguy:

You can remove that option from your .htaccess file as long as the System Config -> File and Directory Settings -> Use Directory Links is set to "no".

It's set to no, so I'm removing the line. I don't think we will ever be big enough to need that set to yes. If we do, I hope I remember to put it back - lol.

Thanks Brian,


_________________
Ken

[Ken Rich]

bigguy:

HELP - Brian

Brian, I'm trying to get a file to you to look at. It seems to be a log-in backdoor file of some sort that the hackers left for themselves.

I don't see a way to attach it and you have no PM button - what's up with that?


_________________
Ken