Sunday 17th December 2017 11:50

Hello to you all,

I got an erro message while trying to install zenario (zenario-probusiness-7.7.43763.zip). Suspecting the source to be the .htaccess file, I ran it through this online htaccess checker (http://www.htaccesscheck.com/).

Reported error on line 4: Header setifempty X-Frame-Options SAMEORIGIN

Error message reported: Fatal: first argument must be add, set, append, unset or echo.

 

I commented these lines at the top of the file:

# <ifModule mod_headers.c>
# Header setifempty X-Frame-Options SAMEORIGIN
# </ifModule>

 

Et voilà, it worked.

 

My question is: "How important is this Header setifempty X-Frame-Options SAMEORIGIN"?

 

Regards,

 

AlexDP

Monday 18th December 2017 15:40

Hi there Alex

 

Yes you need this line, it's there for security reasons. Your site can be vulnerable to a type of attack called clickjacking without it set.

 

If you're running an older version of Apache (before 2.4.7) that doesn't support this feature, try using this instead:

 

<ifModule mod_headers.c>
Header set X-Frame-Options SAMEORIGIN
</ifModule>

 

 

(By the way, I'll add a note about this to the system requirements.)

You must confirm your screen name on your profile in order to comment.

Please Login if you wish to add a message.