Download database and configs stay available in web server

AVC6 years ago

Good afternoon.
my .sql files and other important files that expose my configuration structure are available for download if the user picks up my address for example http://174.43.54.2:8082/database.sql. After that the file is downloaded to the user.
Is there any way to block this availability so as not to compromise the security of my project?
Thank you and sorry for the English. (TRANSLATED)

Anton Tananaev6 years ago

No such files are exposed by default. Traccar doesn't even have database.sql file. It's a file that you created yourself and put into the location that's exposed to the web.

AVC6 years ago

Thanks for repply Anton.
I identify that everything that is provided within the / web folder is available through the browser.

database.sql was an example that created my backup file called traccar.sql

Anton Tananaev6 years ago

Web folder is available through browser and that's by design. There are no database or configuration files there. In fact, there are no sensitive files there.

AVC6 years ago

Ok my friend.
Sorry for my problem.
What is all that is inside the / web folder to be downloaded by the browser, and my .htm and .js files are there.

AVC6 years ago

Sorry for my wrong question.
Realy my arquives.sql they are in the /web because i create a cronjob for auto backup.. hahahaha...

Thanks man... Your Job is Amazing...
SOLVED