First Commit

This commit is contained in:
mark committed 2026-10-19 15:22:52 -07:00
1 parent 5eb9dd037d
commit 2e62c0e60b
11877 files changed
+2035312

No files matched your search

+25
View File
@@ -0,0 +1,25 @@
# Deny direct web access to files that hold secrets or internal data.
# These are only ever include()d by the app — never requested directly — so
# blocking URL access to them is safe and prevents source/secret disclosure
# (e.g. if PHP is ever misconfigured and serves .php as text).
<FilesMatch "^(config|db_config)\.php$">
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
</IfModule>
</FilesMatch>
# Block the CA bundle, any JSON, and gzipped backups from being fetched.
<FilesMatch "\.(json|gz|pem)$">
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
</IfModule>
</FilesMatch>