[Forum] .htaccess clientscipt folder

[emp1re]

Our forum was injected with some bad scripts.
After the use of google we found that we should put a .htaccess file with :

<Files ~ "\.(php\d*|cgi|pl|phtml)$">
order allow,deny
deny from all
</Files>

in each 777folder.
Now there is our problem. We have an attachements folder for uploads of attachements in topics.
Do we have to place this .htacces in each subfolder ?
If so.. Thats allmost impossible. I dont believe we will get that old to put the files in each subfolder.. Because there are so many.. or is it enough to put it only in the attachement folder ?

[AliMadkour]

Hi,

No you'll need to add it into attachment directory only, But I'd recommend moving attachments folder to non web access directory I.E if you're using cPanel move attachments directory outside public_html folder ( don't forget to update its location from admincp ) that will be more secure,

[emp1re]

Thank you.. great idea. We will move the directory.. Problem Solved.
.