D7.34 Status Report flags .htaccess required in sites/default/files
Posted by HJulien on March 15, 2015 at 9:57pm
I am getting this error on the Status report:
Public files directory Not fully protected
See http://drupal.org/SA-CORE-2013-003 for information about the recommended .htaccess file which should be added to the sites/default/files directory to help protect against arbitrary code execution.
The http://drupal.org/SA-CORE-2013-003 page is overloaded and as clear to me as mud.
Am I supposed to copy the htaccess file under public_html into this folder or the one in the/public_html/tmp/ folder? They're different.
Read more