Prevents Apache from serving CLI scripts

This commit is contained in:
Hypolite Petovan 2020-09-07 05:43:20 -04:00
parent b530ef709d
commit 3bd8b81154
3 changed files with 15 additions and 2 deletions

4
.gitignore vendored
View file

@ -71,8 +71,8 @@ venv/
/addons
/addon
#ignore .htaccess
.htaccess
#ignore base .htaccess
/.htaccess
#ignore filesystem storage default path
/storage

View file

@ -1,3 +1,6 @@
# This file is meant to be copied to ".htaccess" on Apache-powered web servers.
# The created .htaccess file can be edited manually and will not be overwritten by Friendica updates.
Options -Indexes
AddType application/x-java-archive .jar
AddType audio/ogg .oga

10
bin/.htaccess Normal file
View file

@ -0,0 +1,10 @@
# This file prevents browser access to Friendica command-line scripts on Apache-powered web servers.
# It isn't meant to be edited manually, please check the base Friendica folder for the .htaccess-dist file instead.
<IfModule authz_host_module>
Require all denied
</IfModule>
<IfModule !authz_host_module>
Order Allow,Deny
Deny from all
</IfModule>