Administrator manual¶
As an administrator, we make your life as lightweight as possible, unlike other similar extensions. The only point you
need to tackle is to prevent direct access to /fileadmin/
at the web server level.
Note
You are naturally free to adapt the configuration to leave /fileadmin/
free to access but enable access check
only for a given list of subdirectories. If so, your web server will bypass any possible restrictions the users
defined to files and directories you choose to never ever protect.
Installation (Apache)¶
Edit file .htaccess
(or your virtual host) to read:
RewriteCond %{REQUEST_URI} !/fileadmin/_processed_/.*$
RewriteRule ^fileadmin/.*$ %{ENV:CWD}index.php [QSA,L]
BEWARE: Be sure to add this rule before any other related rule.
Installation (Nginx)¶
Edit your server block to read:
location / {
rewrite ^/fileadmin/(?!(_processed_/)) /index.php last;
# snip
}
or, if that better fits your setup, like that:
location ~ /fileadmin/(?!(_processed_/)) {
rewrite ^(.+)$ /index.php last;
}