2023-03-08, 12:46 PM
Hi -- new user here and I am testing out MyBB and during installation I ran into a problem with the .htaccess file in the base directory of the MyBB installation. I was getting 500 errors and the installer wouldn't load. So I edited the .htaccess file chunk by chunk to get it to work until there was basically nothing left, and then the installer seemed to work.
So now I have the forum installed and running fine (and it's great forum software - hats off to the developers!) -- but I haven't put it into production yet since I'm concerned my installation is vulnerable because it's missing that first .htaccess file.
BTW, the other .htaccess file which is located in admin/backups/ is still there... it's just the base .htaccess file that I removed.
Is this a cause for concern?
And what did the base .htaccess file really do?
From my non-IT reading of it, it looks like it:
1 - does something with security filtering, which I don't understand
2 - beautifies the URLs for search engines with rewrites which I don't need
3 - compresses things with GZIP, which would be nice, but I guess I don't absolutely need
4 - and the last thing is something with error.log, which I don't understand
So I just want to make sure my MyBB installation is safe and secure, but it won't work with the .htaccess file...
Any thoughts or suggestions?
So now I have the forum installed and running fine (and it's great forum software - hats off to the developers!) -- but I haven't put it into production yet since I'm concerned my installation is vulnerable because it's missing that first .htaccess file.
BTW, the other .htaccess file which is located in admin/backups/ is still there... it's just the base .htaccess file that I removed.
Is this a cause for concern?
And what did the base .htaccess file really do?
From my non-IT reading of it, it looks like it:
1 - does something with security filtering, which I don't understand
2 - beautifies the URLs for search engines with rewrites which I don't need
3 - compresses things with GZIP, which would be nice, but I guess I don't absolutely need
4 - and the last thing is something with error.log, which I don't understand
So I just want to make sure my MyBB installation is safe and secure, but it won't work with the .htaccess file...
Any thoughts or suggestions?