What are the potential pitfalls of trying to access a directory outside of the DocumentRoot in Apache?

Trying to access a directory outside of the DocumentRoot in Apache can pose security risks as it may expose sensitive files or directories to unauthorized users. To solve this issue, it is important to ensure that the Apache configuration restricts access to only the specified DocumentRoot directory. 

// Set the DocumentRoot directory in Apache configuration file
DocumentRoot /var/www/html

// Restrict access to only the DocumentRoot directory
<Directory /var/www/html>
    Options FollowSymLinks
    AllowOverride None
    Require all granted
</Directory>

Keywords

Apache DocumentRoot directory traversal security vulnerability open_basedir.

Related Questions