View source for KB00007:Prevent Access to the logs directory

PartKeepr stores diagnostic messages in the <code>app/logs</code> directory. As these logs may contain sensitive data, especially username/passwords for newly created users, it is important to protect the <code>app/logs</code> directory from unauthorized access.

Setup checks if it can retrieve the file <code>app/logs/ignore.json</code> from the web.

PartKeepr provides an appropriate <code>.htaccess</code> file to prevent access to the <code>app/logs</code> directory. Since you are reading this KB article, you are using a different web server or <code>.htaccess</code> file parsing is disabled.

Ways to resolve the problem:
* Configure your web server's root directory to include <code>web/</code> only. On Apache2, this is accomplished via the [https://httpd.apache.org/docs/2.4/en/mod/core.html#documentroot DocumentRoot] directive.
* Configure your web server to prevent access to <code>app/logs</code>
* Configure your apache2 web server to parse <code>.htaccess</code> files

Please note that due to the various numbers of web servers, environments and hosting providers, the PartKeepr team cannot provide free support. Please contact your provider on how to make the required webserver configurations or use the support forums of your web server project.

[[Category:Knowledge Base]]