Security related question .htaccess -Joomla 1.5.15 - Joomla! Forum - community, help and support

hi,

i need in following questions below:

first question:

why enabled directory listing on following directories?

code: select all

mydomain.com/mod_jatabs/
mydomain.com/mod_joomlaaddthis/
mydomain.com/mod_jw_sir/
mydomain.com/mod_novasfh/

i using last (1.5.15) joomla's standard .htaccess file. on other directories cannot list directory above can. how disable in .htaccess instead of using new .htaccess "indexingnore *" command?

second question:

i have uncommented lines in new .htaccess (joomla's 1.5.15 htaccess.txt), xml files still can opened.

code: select all

## deny access extension xml files (uncomment out activate)
<files ~ "\.xml$">
order allow,deny
deny all
satisfy all
</files>

any idea?

thanks in advance!

regards,
theblase

i have found solution second question. add new line (marked bold) .htaccess file:

## deny access extension xml files (uncomment out activate)
redirectmatch 403 (?:/plugins/[^/]*/[^/]*|(?:/administrator)?/(?:components|modules)/(?:com|mod)_([^/]*)/(?:(?:com|mod)_)?\1)\.xml$
#<files ~ "\.xml$">
#order allow,deny
#deny all
#satisfy all
#</files>
## end of deny access extension xml files

and working!!!

any idea first question?

thanks,
theblase