First Commit
This commit is contained in:
1 parent
5eb9dd037d
commit
2e62c0e60b
11877 files changed
+2035312
No files matched your search
@@ -0,0 +1,25 @@
|
||||
# Deny direct web access to files that hold secrets or internal data.
|
||||
# These are only ever include()d by the app — never requested directly — so
|
||||
# blocking URL access to them is safe and prevents source/secret disclosure
|
||||
# (e.g. if PHP is ever misconfigured and serves .php as text).
|
||||
|
||||
<FilesMatch "^(config|db_config)\.php$">
|
||||
<IfModule mod_authz_core.c>
|
||||
Require all denied
|
||||
</IfModule>
|
||||
<IfModule !mod_authz_core.c>
|
||||
Order allow,deny
|
||||
Deny from all
|
||||
</IfModule>
|
||||
</FilesMatch>
|
||||
|
||||
# Block the CA bundle, any JSON, and gzipped backups from being fetched.
|
||||
<FilesMatch "\.(json|gz|pem)$">
|
||||
<IfModule mod_authz_core.c>
|
||||
Require all denied
|
||||
</IfModule>
|
||||
<IfModule !mod_authz_core.c>
|
||||
Order allow,deny
|
||||
Deny from all
|
||||
</IfModule>
|
||||
</FilesMatch>
|
||||
Reference in new issue
Block a user