JoomlaFCK has critical vulnerability which allows non authorized users upload .htaccess files to server.
Solution: in file /mambots/editors/fckeditor/editor/filemanager/upload/php/config.php
change line:
Code:
$Config['DeniedExtensions']['files'] = array('php','php2','php3','php4','php5','phtml','pwml','inc','asp','aspx','ascx','jsp','cfm','cfc','pl','bat','exe','com','dll','vbs','js','reg','cgi');
to
Code:
$Config['DeniedExtensions']['files'] = array('php','php2','php3','php4','php5','phtml','pwml','inc','asp','aspx','ascx','jsp','cfm','cfc','pl','bat','exe','com','dll','vbs','js','reg','cgi', 'htaccess');
_________________
Joomlaportal.ru News, articles and tutorials
Joomlaforum.ru Russian Joomla Support Forum
Member of the Russian Joomla Translation Team
