Apache Security Fix

Denies access to all dotfiles on Apache webserver.
This commit is contained in:
Mathieu Aubin
2016-07-05 01:06:34 -04:00
committed by GitHub
parent 8b6b924d09
commit 0e78dce54d

View File

@@ -13,3 +13,10 @@
RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^ index.php [L] RewriteRule ^ index.php [L]
</IfModule> </IfModule>
# Restrict access to DotFiles (like .htaccess, .env, .gitignore....)
# Do not remove if you are running Apache web server.
<FilesMatch "^\.">
Order allow,deny
Deny from all
</FilesMatch>