n8blog
distraction in action

Wordpress 2.0.4 is out, and during the upgrade process I came to realize that I was potentially serving some unexpected content on my website. I’m using subversion to manage my installs of several web apps, and it turns out that the .svn directories that it litters about were actually accessible if you crafted a clever URL. I doubt this was much of a security problem, but it’s still something I’d rather fix.

The proper fix was slightly tricky, and it took a lot of searching to find help. I was trying to fix it in an .htaccess file, but the DirectoryMatch tag I needed isn’t allowed in .htaccess files for some reason. So in the end, here’s what I added to my httpd.conf file:

<DirectoryMatch "^/.*/\.svn/">
  Order deny,allow
  Deny from all
</DirectoryMatch>

  Comments:

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Please type this word with the letters reversed: live