Merge pull request #11351 from tobiasd/20220316-11350

.htaccess-dist deny access to some backup files
This commit is contained in:
Hypolite Petovan 2022-03-16 14:56:18 -04:00 committed by GitHub
commit 2703fd50fc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -6,6 +6,7 @@ AddType application/x-java-archive .jar
AddType audio/ogg .oga AddType audio/ogg .oga
#AddHandler php53-cgi .php #AddHandler php53-cgi .php
# deny access to log files (friendica.log or php.out)
<FilesMatch "\.(out|log)$"> <FilesMatch "\.(out|log)$">
<IfModule authz_host_module> <IfModule authz_host_module>
#Apache 2.4 #Apache 2.4
@ -17,6 +18,18 @@ AddType audio/ogg .oga
</IfModule> </IfModule>
</FilesMatch> </FilesMatch>
# deny access to backup files
<FilesMatch "(\~|\.bak|\.swp)$">
<IfModule authz_host_module>
#Apache 2.4
Require all denied
</IfModule>
<IfModule !authz_host_module>
#Apache 2.2
Deny from all
</IfModule>
</FilesMatch>
<IfModule mod_rewrite.c> <IfModule mod_rewrite.c>
RewriteEngine on RewriteEngine on
# Protect repository directory from browsing # Protect repository directory from browsing