Unprotected Directories

@glossycat. Yes, I think it’s best just not to look! I love your GC06 Jay – Bright theme by the way!

By the way, putting the index.html or index.php into a folder doesn’t protect you, at all. You need to create a .htaccess file and type this inside of it:

<files .htaccess>
order allow,deny
deny from all
</files>

# disable directory browsing
Options All -Indexes

ErrorDocument 403 /forbidden.html
ErrorDocument 404 /error.html

forbidden.html and error.html would be the files the person would get to if he/she ever receives a 403 or 404 error.

And by the way, this is a must for all of your websites, be it a TF theme, a client’s site or your own website.

Good luck!

Where does this go? In with your folder of files?

josweb said
Where does this go? In with your folder of files?

Your web root. Depending on your server configuration it will be something like; /www, /htdocs or /public_html

You could also put index.html or index.php in each directory with a meta refresh 0 redirect for extra protection.

Most of the time rippers don’t even access your directories directly, they use site downloaders.

If you wanna really make them struggle, then for your demos use file_get_contents() for core files and encrypt it

Scott

How do you encrypt files? Woweeeeeee I have so much to learn! Thank you all for your time, I really do appreciate it!

crozer said
You need to create a .htaccess file and type this inside of it:

<files .htaccess>
order allow,deny
deny from all
</files>

# disable directory browsing
Options All -Indexes

ErrorDocument 403 /forbidden.html
ErrorDocument 404 /error.html

Many thanks for the tip!

josweb said
How do you encrypt files? Woweeeeeee I have so much to learn! Thank you all for your time, I really do appreciate it!

http://www.iwebtool.com/html_encrypter

this doesn’t make you any safer, just makes it harder for them. They can EASILY read it as well as JS can.

josweb said
@glossycat. Yes, I think it’s best just not to look! I love your GC06 Jay – Bright theme by the way!

Thank you mate! It’s appreciated a lot All the best

my theme is encrypted , well the live preview is of course, that doesn’t make any safer just, it’s kinda “harder” to see the code, but then you can just open it in firebug, and there you have everything..funny thing I didn’t see my theme getting ripped yet, and it’s been like 6 days, most of the time it’s ripped in like an hour or so

Nekto said

crozer said
You need to create a .htaccess file and type this inside of it:

<files .htaccess>
order allow,deny
deny from all
</files>

# disable directory browsing
Options All -Indexes

ErrorDocument 403 /forbidden.html
ErrorDocument 404 /error.html

Many thanks for the tip!

+1