• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

How permission correctly in vhost?

Azurel

Silver Pleskian
Hello.

I have domainA and domainB. domainA hosting files, for security ALL browser access should denied.. EXCEPT domainB make in php call with readfile() to a file on domainA. This should allowed.

domainB => readfile(http://domainA/myfile) => allowed ... all other access should denied.

So I set in vhost of domainA this:
<DirectoryMatch "^/var/www/vhosts/domainA/httpdocs/folder/">
Order deny,allow
Deny from all
Allow from 127
Allow from server-ipv4
Allow from server-ipv6/128
Allow from ::1/128
</DirectoryMatch>

but that give me in domainB for readfile():
readfile(http://domainA/folder/file.png): failed to open stream: HTTP request failed! HTTP/1.1 403 Forbidden

Plesk 11.5.30#48 with centOS6.6

Can anybody show me my mistake?
 
Back
Top