I've updated our shop to Magento version 220.127.116.11, and the images stopped work. I tried fresh install if it wasn't caused by
the update proccess and found that the problem persists.
The cause of the problem is .httaccess in media folder, to be exact these lines:
Options All -Indexes
php_flag engine 0
AddHandler cgi-script .php .pl .py .jsp .asp .htm .shtml .sh .cgi
My hosting doesn't allow these directives. Any problem that I could have by deleting these ?
Thanks in advance.
These directives are there to prevent the ability to upload php files to the media folder and then executing them. One area this can be exploited is via customer file upload. Your hosting provider is not providing a secure environment.
Removing it just isn't a good idea and if the server can't protect itself, a hacked e-commerce site is in your future.