Phoca Forum

I see new files ".htaccess" and "web.config" being added to direcories created in the backend multiple file upload dialog. I guess this is introduced by one of the latest security updates (I am at V6.4.1), right?

For my non-technical backend users it is very confusing to see a file "web.config" whhich they have not uploaded. The ".htaccess" is already excluded form the list, probably because "hidden" files are always excluded.

I'd appreciate if the "web.config" file aould also be excluded from the list of files, as it is never a user file which would be assignet to a catgegory. Its presence inhibits the simple click on the "Filename" checkbox to select all file. Now, you always have to remember to deselect "web.config" before klicking on "Save & Close.

Regards
Peter

Hi,
It's a security feature. However, if ease of use is more important to you than security, you can disable this feature in the Phoca Download Options:


Kind regards,
Benno

Thanks for the pointer.

Security *is* more important to me, however, file "index.html" is already excluded from the list, as well as hidden files are. So, why not exclude that purely technical file "web.config" as well?