Greetings:
What security issue does Joomla 1.5.15 address?
Answer, "It is possible to read the contents of an extension's XML file and find the version number of the installed extension. This could allow people to exploit a known security flaws for a specific version of an extension."
Critical note: "Turn on Apache mod_rewrite and configure your .htaccess file to filter out XML files. In the htaccess.txt file shipped with version 1.5.15, lines 35-39 contain example code that will deny access to XML files. You can incorporate this code (or similar code) into your .htaccess file. Be sure to test that it does not cause problems on your site."
On this issue, add the following code to your .thaccess file:
Code:
## Deny access to extension xml files (uncomment out to activate)
<Files ~ "\.xml$">
Order allow,deny
Deny from all
Satisfy all
</Files>
OTHER:
The link on
http://www.joomla.org/download.html to the upgrade files is incorrect (as of 9:20 AM EST today, 11-05-2009). The correct link is
http://joomlacode.org/gf/project/joomla ... ge_id=4734Thank you.
Login
Register
Rules
FAQ
The team
