How to make Access deny for special file extension

Hi @Muhammad_Khoiruddin,

Is your files directory inside the web root? If so, that’s an unsafe configuration. See for example:

https://docs.pkp.sfu.ca/admin-guide/3.3/en/configure#secure-files-directory

Regards,
Alec Smecher
Public Knowledge Project Team