Skip to:
Content
Pages
Categories
Search
Top
Bottom

BuddyPress Docs attachments directory is publicly accessible

  • @cccc1234

    Participant

    I have the following error:

    Your BuddyPress Docs attachments directory is publicly accessible. Doc attachments will not be properly protected from direct viewing, even if the parent Docs are non-public.

    It looks like you are running Apache. The most likely cause of your problem is that the AllowOverride directive has been disabled, either globally (httpd.conf) or in a VirtualHost definition. Contact your host for assistance.

    My apache2.conf are below:

    ____

    #=========================================================================#
    # Default Web Domain Template #
    # DO NOT MODIFY THIS FILE! CHANGES WILL BE LOST WHEN REBUILDING DOMAINS #
    # https://hestiacp.com/docs/server-administration/web-templates.html #
    #=========================================================================#

    <VirtualHost xx.xx.xx.xx:8080>

    ServerName domain.com

    ServerAdmin info@domain.com
    DocumentRoot /home/user/web/domain.com/public_html
    ScriptAlias /cgi-bin/ /home/user/web/domain.com/cgi-bin/
    Alias /vstats/ /home/user/web/domain.com/stats/
    Alias /error/ /home/user/web/domain.com/document_errors/
    #SuexecUserGroup user user
    CustomLog /var/log/apache2/domains/domain.com.bytes bytes
    CustomLog /var/log/apache2/domains/domain.com.log combined
    ErrorLog /var/log/apache2/domains/domain.com.error.log

    IncludeOptional /home/user/conf/web/domain.com/apache2.forcessl.conf*

    <Directory /home/user/web/domain.com/stats>
    AllowOverride All
    </Directory>
    <Directory /home/user/web/domain.com/public_html>
    AllowOverride All
    Options +Includes -Indexes +ExecCGI
    </Directory>

    <FilesMatch \.php$>
    SetHandler “proxy:unix:/run/php/php8.3-fpm-domain.com.sock|fcgi://localhost”
    </FilesMatch>
    SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0

    IncludeOptional /home/user/conf/web/domain.com/apache2.conf_*
    IncludeOptional /etc/apache2/conf.d/*.inc

  • You must be logged in to reply to this topic.
Skip to toolbar