更新Drupal后报告出现错误See http://drupal.org/SA-CORE-2013-003 for information...

将Drupal 7.22更新到 7.26后,report报告里出现两个错误:

 

Public files directory                                                                           Not fully protected
See http://drupal.org/SA-CORE-2013-003 for information about the recommended .htaccess file which should be added to the sites/default/files directory to help protect against arbitrary code execution.

 

Temporary files directory                                                                    Not fully protected
See http://drupal.org/SA-CORE-2013-003 for information about the recommended .htaccess file which should be added to the c:\windows\temp directory to help protect against arbitrary code execution.

 

点开See后面的连接,内容有点多,不管其他的,按下面的方法处理后错误消失

看上面的错误,大意是说公共文件路径和临时文件路径没有完全保护,叫修改.htaccess文件后添加到sites/default/files目录和c:\windows\temp目录。

 

找到sites/default/files目录下,发现有一个.htaccess文件,去掉写保护,用写字板打开,替换下面的内容,然后保存,并把这个文件复制到c:\windows\temp临时文件目录下即可。

 

# Turn off all options we don't need.
Options None
Options +FollowSymLinks

# Set the catch-all handler to prevent scripts from being executed.
SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006
<Files *>
# Override the handler again if we're run later in the evaluation list.
SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003
</Files>

# If we know how to do it safely, disable the PHP engine entirely.
<IfModule mod_php5.c>
php_flag engine off
</IfModule>

 

发布了23 篇原创文章 · 获赞 1 · 访问量 5万+
發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章