Files 403.shtml , order allow,deny , allow from all

Hello, i found following paragraph in my .htaccess file:

<Files 403.shtml>
order allow,deny
allow from all
</Files>

Code (markup):

please what that mean? That 403.shtml page should be always accessible to all? isnt that so by default, so why it is there?

 

Looks like it could be a XSS backdoor. I would remove it and the file from your server.

 

i found that code in around 15 .htaccess file inside my hosting account, if that somehow allow anyone to do 403 forbidden actions, than im glad it was found

 

You might want to contact your hosting provider about what you found.

 

thx, i want to ask if anyone else can confirm mentioned code is malicious as i found it in more than one hosting account of mine, in .htaccesses from different content management systems.. just want to be sure i can safelly remove it from everywhere i find it

 

Are you sure you didn't generate the htaccess code yourself from your hosting control panel? Seems like a legit piece of code if you're trying to prevent certain ips from view site... need to show them something, right, so why not a 403 error?

Here, read this thread as it looks like this is cPanel functionality relating to parked or add-on domains within the same account.
https://forums.cpanel.net/threads/htaccess-file-deny-from-all-redirects-to-404-not-found-on-403-shtml.293032/

 

I would suggest this as well. It's possible that your provider has implemented regeneration of the said file for a reason considering it has shown up multiple times. And really, may not be a security threat to you at all.

Consider looking at this article: http://www.cyberciti.biz/faq/apache-403-forbidden-error-and-solution/