2014年6月11日 星期三

Drupal狀態報告出現SA-CORE-2013-003

將提示的三個路徑內的.htaccess檔案加入如下的內容:

# Set the catch-all handler to prevent scripts from being executed.
SetHandler Drupal_Security_Do_Not_Remove_See_SA_2006_006

  # Override the handler again if we're run later in the evaluation list.
  SetHandler Drupal_Security_Do_Not_Remove_See_SA_2013_003


# If we know how to do it safely, disable the PHP engine entirely.

  php_flag engine off


修改前需將檔案屬性"唯讀"修改