CiviCRM Community Forums (archive)

Hi,

I know there is an extensive post for this topic at CiviCRM 4.4.4 -- and I've read it, and checked my installation, and read / checked a bunch of other posts ...

Anyhow, in a bare browser (Firefox and MS IE in this case), with no logon, I can browse to the log directory and pull up the log, no problem. 

But I should not be able to do this, so please help me figure out why I can. 

Configuration:

AWS EC2 micro instance, LAMP installed, Elastic IP enabled, access locked down to TLS https://,  VirtualHost set with:
        <Directory /var/www/wordpress/*>
                AllowOverride All
                Order Deny,Allow
                Allow from all
        </Directory>
for both port 80 and port  443, and .htaccess in the log directory:
<user>@ip-<Elastic IP>:/var/www/wordpress/wp-content/plugins/files/civicrm/ConfigAndLog$ ls -al
total 16
drwxr-xr-x 2 www-data www-data 4096 Feb  2 00:09 .
drwxr-xr-x 7 www-data www-data 4096 Feb  2 00:09 ..
-rw-r--r-- 1 www-data www-data 1309 Feb  2 00:09 CiviCRM.<ID obscured>.log
-rw-r--r-- 1 www-data www-data   56 Feb  2 00:09 .htaccess

and

<user>@ip-<Elastic IP>:/var/www/wordpress$ sudo cat /var/www/wordpress/wp-content/plugins/files/civicrm/ConfigAndLog/.htaccess
<Files "*">
  Order allow,deny
  Deny from all
</Files>

But the log shows up anyhow.

Ideas?

Thanks,

DVHirst