.htaccess is working but Owncloud keeps giving security warnings #17652
Description
OS: Ubuntu 14.04
Owncloud version: 8.1
Updated from Owncloud 8.0.5
Using MySQL
I think my .htaccess is working because if I changed the upload limit size of .htaccess, it actually effects the upload size of a file.
Server also gives me permission denied if I try to access the folder apps by browser.
Expected Result
No error message.
Actual Result
Error message:
Your data directory and your files are probably accessible from the Internet. The .htaccess file is not working. We strongly suggest that you configure your web server in a way that the data directory is no longer accessible or you move the data directory outside the web server document root.
Did I miss any thing?
Below is my apache ssl config
<IfModule mod_ssl.c>
<VirtualHost _default_:443>
ServerName <.......>
Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"
ServerAdmin <........>
DocumentRoot /var/www/owncloud
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
<Directory /var/www/>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Require all granted
</Directory>
ErrorLog ${APACHE_LOG_DIR}/error.log
LogLevel warn
CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined
SSLEngine on
SSLCertificateFile /etc/apache2/ssl/owncloud.pem
SSLCertificateKeyFile /etc/apache2/ssl/owncloud.key
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory /usr/lib/cgi-bin>
SSLOptions +StdEnvVars
</Directory>
BrowserMatch "MSIE [2-6]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
<Directory /var/www/owncloud>
Options Indexes FollowSymLinks MultiViews
AllowOverride All
Require all granted
# add any possibly required additional directives here
# e.g. the Satisfy directive (see below for details):
Satisfy Any
</Directory>
</VirtualHost>
</IfModule>