From: Mike Cochrane <mikec@mikenz.geek.nz>
Date: Sun, 20 Jul 2008 11:20:32 +0000 (-0400)
Subject: Block access to .ini files http://laconi.ca/PITS/00240
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=6dac91d77498961ce658cd36970e80d94ec517bb;p=quix0rs-gnu-social.git

Block access to .ini files http://laconi.ca/PITS/00240

darcs-hash:20080720112032-533db-e7bd1e7faaf3f1580b90faf425997de034f1a0cc.gz
---

diff --git a/htaccess.sample b/htaccess.sample
index 86d014618b..7ec889bc1c 100644
--- a/htaccess.sample
+++ b/htaccess.sample
@@ -96,3 +96,7 @@ RewriteRule ^api/blocks/create/(.*)$ index.php?action=api&apiaction=blocks&metho
 RewriteRule ^api/blocks/destroy/(.*)$ index.php?action=api&apiaction=blocks&method=destroy&argument=$1 [L,QSA]
 RewriteRule ^api/help/(.*)$ index.php?action=api&apiaction=help&method=$1 [L,QSA]
 
+<FilesMatch "\.(ini)">
+  Order allow,deny
+</FilesMatch>
+