Thursday, March 27, 2014

Deny From All

Given some legacy code (admin surface) doing AJAX calls. The error either could be in the file that calls AJAX and the file being called. That's for sure. Or is it? Checked both, rewritten all PHP without any magic effect. Turns out, that /controller/ folder had a crucial .htaccess with three magic words: Deny From All, which restricted access to everything in that folder (except includes and requires), including the precious script that should have been called.

No comments:

Post a Comment