If one has a multi-site configuration, the URLs should not have the path to Drupal in it.
For example, if I installed Drupal off the htdocs root, the admin panel assumes the following:
http://www.mysite.com/drupal-6.6/filetoerror403.html

Error pages should be page nodes, not some file outside the Drupal system so that they can be rendered consistently with the overall theme.

Kerry Kobashi

Comments

kkobashi’s picture

kkobashi commented

Also, this is a potential security risk. Users can hit your website on purpose with a 403 error and the URL will show the path to Drupal providing more information to attack. I wanted to use RewriteBase /my-drupal-location to hide where Drupal existed. There should be no hint of Drupal in the URLs.

dpearcefl’s picture

dpearcefl commented

Is this still an issue using current Drupal 6?

Status: Active » Closed (outdated)

Automatically closed because Drupal 6 is no longer supported. If the issue verifiably applies to later versions, please reopen with details and update the version.