Phoca Forum

The news files "web.config" and ".htaccess" seem to be added only upon directory creation in the backend. So the improve security only on new but not existing direcories.

Souldn't the files finally exist in all directries under Phoca Download "control"?

• Should one copy them manually into all existing directories as a one time action?

• Wouldn't it be reasonable to verify their existence in the current directory upon each file upload?

• If there was a need to update their content in the future, how to handle this?

Phoca Download 6.1.4

Regards
Peter

Hi, this is an extra added feature. Yes, if possible, it is a good idea to copy these files to existing directories. The problem with subsequently checking directories and adding such files is that it can slow down the system, so it is rather unwanted by users.

Thanks. Understood.

Maybe I'm missing the point of your question, if so I'm sorry to interfere.

Wouldn't a .htaccess in a higher level folder be valid for all subfolders by default?

lpatrick wrote: 05 Sep 2026, 10:56 Maybe I'm missing the point of your question, if so I'm sorry to interfere.

Wouldn't a .htaccess in a higher level folder be valid for all subfolders by default?

I think you made a good point, and I hadn't thought about this. You're right about .htaccess, but I do not know (nor care) about web.config. So, having the .htaccess in the root of the Phoca Download directory should be sufficient.