So you want to stop people from viewing your hard-worked-at Xaraya templates?

Here’s a good suggestion picked from the Xaraya lists posted by Paul Crovella:

For those in the know it doesn’t take much to figure out where your .xt files are located. The web server will send these out in plain text if you point the url at them.

I don’t know how to do this with IIS or any other web server, but if you’re using apache just drop the following into your .htaccess file:

order deny,allow
deny from all

This should keep apache from serving these out directly.

Thanx Paul, I tested it here and it works!!

Comments