CSRF detected

[Zegnåt]

What do you mean you can’t open any image?
In /data/ there is one that has:

Code:

Deny from all

But within /data/uploads/ there should be a different .htaccess:

Code:

Options -Indexes
Allow from all

<Files *.xls>
ForceType applicaton/octet-stream
</Files>

<Files *.csv>
ForceType applicaton/octet-stream
</Files>

This different .htaccess in /data/uploads/ makes sure that images and any other uploads will be accessible.

If you have no .htaccess in any of your /data/ folders and you have an “allow” inside the /data/ folder I will be able to check your XML files including your login name and other security information.