Close .tpl access with .htaccess

[ChrisGooding]

Was going to point out the same thing bear.

We have LOADS of customers who that catches out. Parallels (especially Plesk/Virtuozzo) sure know how to make life complicated

Domain section or the actual Domain anyone!!!!

[Blueberry3.14]

Originally Posted by pure|ws

This still does not work for me on https.

Accessing the .tpl file over http is not allowed but if I switch to use https, lo and behold, the tpl contents are exposed.

I use https, and I get a 403, as intended.

[pure|ws]

Thanks for all the help so far but this thing is driving me nuts.
Our WHMCS install is not on a Plesk CP. It's on a bare LAMP.
Let me try a couple of settings and see how it goes.
If this fails, I may need to start sending PMs to some of you here

[pure|ws]

It took a little bit of experimentation but in the end, we ended up modifying the ssl.conf file with the directives posted in this thread.

We are good now. I just don't want to leave our issue on this topic open.Thanks everyone!

[gerrybakker]

I have a strange problem with this addon. It works great on my older WHMCS site that has been upgraded to 4.1.2 but not on a brand new 4.1.2 install for a different site on the same server. I can add the namespinner.tpl and the {include file="namespinner.tpl"} line to everything except for the configureproductdomain.tpl file - if I add that line to that file all of the CSS formatting goes away and completely ruins the look of the cart when I try to look up a domain name. Any idea why?

[sparky]

In configureproductdomain.tpl try it this way

{include file="$template/namespinner.tpl"}

[gerrybakker]

That fixed it !!!!

Thank you.

[vchosting]

Thanks for this - never considered this until now

[bear]

...and robots.txt doesn't prevent anything from accessing, it merely suggests not to spider it to those bots that listen. Disallow via other means keeps them from even seeing it, rather than calling attention to their existence.

[3awh]

Does anyone know if i have wordpress v 3.0 can I put
<Files ~ "\.tpl$">
Order allow,deny
Deny from all
</Files>
at the top of the wordpress stuff with out effecting anything?

[HerrZ]

in wordpress there are no tpl files. so this would not effect your wp installation.

[3awh]

Originally Posted by HerrZ

in wordpress there are no tpl files. so this would not effect your wp installation.

Great thanks