X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=.htaccess;h=27e55548b09db271335cff27c39af8d8f09c4f4a;hb=df660a601cabb0afe7f3246884f16207b9a0c314;hp=d9adb950c2d25837d23e3cdfdf1fbe4ec477793e;hpb=990ae2b5c9ce5b4f0ab137241ff00032e8133975;p=fa-stable.git

diff --git a/.htaccess b/.htaccess
index d9adb950..27e55548 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,16 +1,30 @@
+# Protect sensitive files.
+<FilesMatch "\.(inc|po|sh|.*sql|log)$">
+	Order allow,deny
+	Deny from All
+	Satisfy All
+</FilesMatch>
+
+# Disable directory listings.
+Options -Indexes
+
+# Set the default index.
+DirectoryIndex index.php
+
 # These settings are recommended
 # Maybe you might have problems
 # with other scripts that needs
 # register_globals ON
-php_flag magic_quotes_gpc Off
-php_flag register_globals Off
-
-#This can be changed only in php.ini or httpd.conf for better security
-#php_flag safe_mode On
-
-# This can be changed only in php.ini
-#php_flag disable_functions "apache_child_terminate, apache_setenv, define_syslog_variables, escapeshellarg, escapeshellcmd, eval, exec, fp, fput, ftp_connect, ftp_exec, ftp_get, ftp_login, ftp_nb_fput, ftp_put, ftp_raw, ftp_rawlist, highlight_file, ini_alter, ini_get_all, ini_restore, inject_code, mysql_pconnect, openlog, passthru, php_uname, phpAds_remoteInfo, phpAds_XmlRpc, phpAds_xmlrpcDecode, phpAds_xmlrpcEncode, popen, posix_getpwuid, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, posix_setuid, posix_uname, proc_close, proc_get_status, proc_nice, proc_open, proc_terminate, shell_exec, syslog, system, xmlrpc_entity_decode"
-
+<IfModule mod_php4.c>
+	php_flag magic_quotes_gpc Off
+	php_flag register_globals Off
+	php_flag session.use_trans_sid Off
+</IfModule>
+<IfModule mod_php5.c>
+	php_flag magic_quotes_gpc Off
+	php_flag register_globals Off
+	php_flag session.use_trans_sid Off
+</IfModule>
 #Sometimes neccessary to add those
 #
 #AddType application/x-javascript .js