[DeltaOS]

Hi there,

the .htaccess files in "comments/css" and "comments/agreement" are blocking the access.

I'd to rename them to get acces to them via the comments system.

Please, check them.

Bye
... Gert

[Steven]

Hi,

I fixed this a few days ago. I applied the fix to the current version, v1.2.

If you re-download Commentics you should see the following in the .htaccess file in the CSS folder.

Code:

OPTIONS -ExecCGI

# deny everything
# <FilesMatch ".*">
# Order Allow,Deny
# Deny from all
# </FilesMatch>

# now allow just certain necessary files
# <FilesMatch ".*\.(?i:css)$">
# Order Allow,Deny
# Allow from all
# </FilesMatch>

[DeltaOS]

Hi Steven,

that's the content of the .htaccess file but it doesn't work on my server/provider.
The same happens with the css files in the admin dir. The auth.php can not load the css files or the images (I made a little change on the source code to display the commentics-logo on the page).

Bye
... Gert

[Steven]

What happens if you comment out the first line of the .htaccess file?

Code:

# OPTIONS -ExecCGI

[DeltaOS]

Hi Steven,

it doesn't change anything.
Still no access.

Bye
... Gert

[Steven]

That's strange. With all lines commented out, it should essentially be an empty .htaccess file.

Does your server not allow .htaccess files?

[DeltaOS]

Hi Steven,

I just commented the 1st line out # OPTIONS -ExecCGI.
Nothing else.

And yes, my server can handle .htaccess files or es it wouldn't block the access to the dir when the .htaccess file is active.

I guess something in your rule is wrong.
I'll check tomorrow the internet. Perhaps I can find a solution.

Bye
... Gert

[DeltaOS]

Hi Steven,

I've checked the internet and then I replaced this line:

Code:

<FilesMatch ".*\.(?i:css)$">

with that line:

Code:

<FilesMatch "\.(css|CSS)$" >

Now it works.

Bye
... Gert

[Static]

What if you try to change the regex to

Code:

"\.(?i:css)$"

The regex from the first one looks correct to me though.

Here's a useful tool if you're interested: http://gskinner.com/RegExr/
You might have to reload the page a couple of times.