PHPFusion 9 and 7 Security Announcements regarding ImageMime Exploits.: The Chill Out Zone

Navigation

Home
Search

Oh no! Where's the JavaScript?
Your Web browser does not have JavaScript enabled or does not support JavaScript. Please enable JavaScript on your Web browser to properly view this Web site, or upgrade to a Web browser that does support JavaScript.

PHPFusion 9 and 7 Security Announcements regarding ImageMime Exploits.

Last updated on 8 years ago

Track thread Print

ChanSuper Admin

Posted 8 years ago

I'm strongly advising all sites on Fusion 7 and 9 to immediately update on these values to your .htaccess file soonest possible.

Code Download source



ForceType application/octet-stream

<FilesMatch "(?i).jpe?g$">

    ForceType image/jpeg

</FilesMatch>

<FilesMatch "(?i).gif$">

    ForceType image/gif

</FilesMatch>

<FilesMatch "(?i).png$">

    ForceType image/png

</FilesMatch>

zizubMember

Posted 8 years ago

Chan - Thanks for the advice.

Anonymous UserVeteran Member

Posted 8 years ago

Without this code

Code Download source

ForceType application/octet-stream

Only this

Code Download source



<FilesMatch "(?i).jpe?g$">

    ForceType image/jpeg

</FilesMatch>

<FilesMatch "(?i).gif$">

    ForceType image/gif

</FilesMatch>

<FilesMatch "(?i).png$">

    ForceType image/png

</FilesMatch>

WanaboSenior Member

Posted 8 years ago

With ForceType application/octet-stream in .htaccess it seems to block css. Site looks like no css is loaded.
Without ForceType application/octet-stream site is OK.

Does the rest of the htaccess work correctly without ForceType application/octet-stream in htaccess?

pHp-Fusion.Asia & pHp-Fusion.Fr & pHp-Fusion.Cn are available for a localized support community. Send PB for info.

zizubMember

Posted 8 years ago

My htaccess with ForceType application / octet-stream and my site is OK. Css working.

WanaboSenior Member

Posted 8 years ago

Double check with browser cache emptied! Initially I didn't notice because css was cached, after flushing cache I noticed.

KvidoSenior Member

Posted 8 years ago

Writing in my .htaccess works. OK.

HarlekinMember

Posted 8 years ago

1. .htaccess do not work on Windows Server, what can i do
2 . i found no .htaccess in PHP Fusion 7.02.07

Anonymous UserVeteran Member

Posted 8 years ago

.htaccess does not work on Windows Server because is only for servers based on Apache. You must convert .htaccess to Web.config.

You can view all discussion threads in this forum.
You cannot start a new discussion thread in this forum.
You cannot reply in this discussion thread.
You cannot start on a poll in this forum.
You cannot upload attachments in this forum.
You can download attachments in this forum.

Moderator: Support Team

Users who participated in discussion: Wanabo, Kvido, Chan, Harlekin, zizub, RobiNN