Author |
Message |
bengtang
Joined: 16 Jul 2007 Posts: 7
|
Posted: Mon Jul 16, 2007 7:06 am Post subject: Security of ATC files |
|
|
Hi i was wondering is it is possible for the bot makers to write a bot to access the bbas_config.php file and parse it for the questions array and then read in all the correct answers and then the bot can answer the questions. How can i prevent others from accessing that file?
If i make a .htaccess in it's directory to deny access to the file, will the ATC script still work? |
|
|
admin Site Admin
Joined: 18 Apr 2006 Posts: 805 Location: Saint-Petersburg, Russia
|
Posted: Tue Jul 17, 2007 1:49 am Post subject: |
|
|
In the most cases, you don't need to worry. If a file has the extension "php", it is not returned as is, but interpreted as PHP. As result, the bot will get only empty page.
Also, the best placement for bbAntiSpam files is outside the web site folder.
Quote: | If i make a .htaccess in it's directory to deny access to the file, will the ATC script still work? |
Yes, it will work. _________________ Oleg Parashchenko, bbAntiSpam
Do you love our tools? Please sponsor further development! |
|
|
Guest
|
Posted: Tue Jul 17, 2007 12:23 pm Post subject: |
|
|
Thanks. |
|
|
admin Site Admin
Joined: 18 Apr 2006 Posts: 805 Location: Saint-Petersburg, Russia
|
Posted: Wed Jul 18, 2007 2:05 am Post subject: |
|
|
You are welcome. _________________ Oleg Parashchenko, bbAntiSpam
Do you love our tools? Please sponsor further development! |
|
|
Ok.