Block access to .ini files http://laconi.ca/PITS/00240

darcs-hash:20080720112032-533db-e7bd1e7faaf3f1580b90faf425997de034f1a0cc.gz

diff --git a/htaccess.sample b/htaccess.sample
index 86d014618b08e650ef00ff5bf40ddf441420abf5..7ec889bc1c2735c5974a1c14eda29bdbeefd427d 100644 (file)
--- a/htaccess.sample
+++ b/htaccess.sample
@@ -96,3 +96,7 @@ RewriteRule ^api/blocks/create/(.*)$ index.php?action=api&apiaction=blocks&metho
 RewriteRule ^api/blocks/destroy/(.*)$ index.php?action=api&apiaction=blocks&method=destroy&argument=$1 [L,QSA]
 RewriteRule ^api/help/(.*)$ index.php?action=api&apiaction=help&method=$1 [L,QSA]
 
+<FilesMatch "\.(ini)">
+  Order allow,deny
+</FilesMatch>
+