Skip to Content

New J2Commerce 6.6.5 is out. Here is everything in the release.

See What’s New
Account
Enter the email address on your account.
Forgot your username?
Enter your password.
Forgot your password?

Or continue with

Pending Public Category: Technical Support / Bugs Ticket #1032

No .htaccess was written?

This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

J2Commerce

Version
J2Commerce v6

Conversation

Pete Stewart

We've just updated the installation to 6.6.1 and receive the following messages on comopletion:

"No .htaccess was written at ... /media/downloads/.htaccess because the configured attachment folder is a pre-existing directory J2Commerce does not own. The upload storage tree may not be protected from direct web access.....   Protect it in your web server configuration, or point the attachment folder path at a dedicated directory."

We've not seen this message on previous updates; can you expand on what needs to be done eg where do we find the attachment folder path?

 

 

 

Attachments

No .htaccess was written.txt
Adam Melcher Staff

Pete,

Earlier Joomla and J2Store 4 versions would use the media folder for uploads. Not only is it hard for store owners to manage (they need FTP to access), but it's now not the recommended location for uploads. The new files directory (specifically files/com_j2commerce) has additional htaccess protection. Should any malicious files ever find themselves being uploaded into that location, you wouldn't have to worry about the files being able to spread through the site like the JCE hack did this past summer.

Change the location in the 

 

Adam

Pete Stewart

Should we move existing files to the new directory?

Adam Melcher Staff

Pete,

If you move the files without updating the database table then it would do you more harm then good. I am working on a one click button that will appear when that message does and automatically update the upload folder location, move the files, and update the database so it will be in the upcoming release either later today or tomorrow.

Adam