Raoul Bhatia
2012-05-23 d4d2e427a561d2fc93e6922f7c6d0ea3e8f6f4a9
improve .htaccess security rules:

1. also prevent access to .gitignore
2. make the second security rule work as expected
3. include README.md in security rules
1 files modified
4 ■■■■ changed files
.htaccess 4 ●●●● patch | view | raw | blame | history
.htaccess
@@ -30,8 +30,8 @@
RewriteEngine On
RewriteRule ^favicon\.ico$ skins/default/images/favicon.ico
# security rules
RewriteRule .git/ - [F]
RewriteRule ^README|INSTALL|LICENSE|SQL|bin|CHANGELOG$ - [F]
RewriteRule .git - [F]
RewriteRule ^/?(README(.md)?|INSTALL|LICENSE|SQL|bin|CHANGELOG)$ - [F]
</IfModule>
<IfModule mod_deflate.c>