Merge pull request #23 from ibnsultan/patch-1

mychidarko · web-flow · commit 98b133a3c28c · 2024-03-06T01:52:45.000+08:00
🔐 Security Fix: Prevent direct access to .env file
diff --git a/.htaccess b/.htaccess
@@ -5,6 +5,12 @@
 
     RewriteEngine On
 
+    # prevent http access to .env
+    <Files ".env">
+        Order Allow,Deny
+        Deny from all
+    </Files>
+
     # Handle Authorization Header
     RewriteCond %{HTTP:Authorization} .
     RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
