Skip to content

Commit 10e960b

Browse files
committed
Disallow access to potential unsafe files in data media via htaccess.
1 parent cc11f41 commit 10e960b

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

data/media/.htaccess

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,14 +5,14 @@
55
Allow from all
66
</IfModule>
77

8-
<Files *.php>
8+
<FilesMatch "(?i)\.(php|php3?|phtml|ph3|php4|ph4|php5|ph5|phtm|sh|asp|cgi|py|pl|exe|aspx)$">
99
<IfModule mod_authz_core.c> # Apache 2.4
1010
Require all denied
1111
</IfModule>
1212
<IfModule ! mod_authz_core.c> # Apache 2.2
1313
Deny from all
1414
Order Deny,Allow
1515
</IfModule>
16-
</Files>
16+
</FilesMatch>
1717

1818
Options -Indexes

0 commit comments

Comments
 (0)