Watch out for problem with having a .git folder inside a public html folder on an Apache server

I was notified about a security vulernability from an email and LinkedIn message that my files were available in cleartext from the .git folder on my site feather.greenrobot.com because I didn’t have an .htaccess file prohibiting it. As far as I know data wasn’t accessed, just my code including database credentials. feather.greenrobot.com currently has 3 users.


One way to do it is this line in .htaccess:
RedirectMatch 404 /.git

Another way I do it is not putting the git repository in the public_html folder, but one level up not being served by Apache.

The same applies for .svn folders. I don’t know if svn is like git in that the clear text of the code is available inside it’s dot folder, but it’s best to prohibit it in the same way as git I think.

My PC server has bad memory, waiting for a replacement.

My PC server running AI software keeps crashing so I tested the memory, and yep it’s bad. My sites and apps listed below won’t work generating content as I only have 1 server, and it’s down.

Open Space

https://wizardwriter.greenrobot.com

https://app.wordcraft3d.greenrobot.com

Want to invest in my business so I can afford more than 1 server? Contact me andy@greenrobot.com

New Version of Open Space for iOS and Mac available on TestFlight

Link to download: https://testflight.apple.com/join/6MMGHF2j

Changes:

You can explore for minerals on The Moon and Mars. 

You can create 3d objects in a replicator in your sphere on the moon.

You can choose a username.

You can reset your username.

You can choose to name your sphere.

There is a limit now of 20 spheres.

Placeholders for cash and energy.

Added blog to About tab.

You can log in using Google as well as Apple now.

Check out Feather

Check out https://feather.greenrobot.com for free investment advice.

This website analyzes stocks you own and tells you if there are buy or sell recommendations, as well as showing dividend yield, in a sortable grid.

To use it, on TDAmeritrade.com, there’s a way to export all your stocks into an excel spreadsheet. Then copy and paste your stock tickers into the website to see if you should reconsider owning those stocks, or if you should buy more.

Let me know any feature requests or bugs. andy@greenrobot.com