about 500 internal server error !

[caogenyan]

hello, every one.

I installed get-simple on webhost, but because of questions for root .htaccess file, the website show 500 internal server error.
I found to deleted some codes, the website is OK.
The main reason is "Order" "Deny" "Allow" directives does not support by webhost.

deleted codes bellow:
<Files ~ "\.xml$">
Order allow,deny
Deny from all
Satisfy All
</Files>
<Files sitemap.xml>
Order allow,deny
Allow from all
Satisfy All
</Files>>

I want to know if this will affect the website's data security.

[Connie]

A hoster who does not allow "Order" "Deny" "Allow" seems strange to me.

Either it is defined for the whole server or you can define it in YOUR .htaccess file

if you do not "deny" access to your xml-files, all your content-data and user-date is open for bots etc. I would not recommend that.

It would be good if we knew the hoster, because we have a wiki page "guidance for specific hosters companies"

[caogenyan]

Hi, Connie
Thanks to answer my questions. I living in China, the hoster is Edong.com which is a chinese company, my test website is "http://www.zizeasy.net/gs/".

welcome to my website for test the security of data.

[shawn_a]

That is strange, it should not 500, unless the file is corrupt or invalid.
Maybe there is a wrapper we can add to prevent those errors.
usually you can stick those in an if()

[caogenyan]

I type http://www.zizeasy.net/gs/data/other/website.xml in browser, then to occur 500 error.
Whether this means that the xml data is relatively safe?

thanks.

[shawn_a]

Depends on why you are getting the error, you should get a forbidden code not a 500, unless your host is setup wrong. Perhaps it is processing xml files as code. Or it is choking on a htaccess file.