Table of Contents
Introduction to hardening
This section is important if you use the ahCrawler on productive systems.
Deny access to a few directories
In the named directories below exist .htaccess files for apache httpd already exist. But it is better to put the deny rules into your vhost configuration.
<Location "/bin"> Require all denied </Location> <Location "/config"> Require all denied </Location> <Location "/data"> Require all denied </Location> <Location "/tmp"> Require all denied </Location>
Basic authentication on backend
In the backend you can setup exactly one backend user.
If you want to give more than 1 user access to the backend then you can restrict the access to the backend with basic authentication. Then you can setup users in htauth users in files or database backends.
IMPORTANT: restrict the access to the location /backend/index.php - a single file only.
<Location "/backend/index.php"> Require valid-user AuthType Basic ... </Location>