For security reasons, I need to check if any directory is read by the client, that is, the Apache server supports .htaccess(no AllowOverride Nonein the apache configuration files). This is very important, as I recently discovered that many products and frameworks do not test this (including Zend and Symphony). Is there a way to test this using only PHP?
By the way, correct me if I'm wrong, but it seems that other servers (nginx or lighttpd) do not support .htaccess. In these cases, how can I verify that my directory is not readable by the client?
source
share