From: Janusz Dobrowolski <janusz@frontaccounting.eu>
Date: Mon, 22 Nov 2010 21:06:35 +0000 (+0000)
Subject: Additional security related fixes.
X-Git-Tag: v2.4.2~19^2~470
X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=commitdiff_plain;h=864e3e8efb83deefcea264233e5c5796a1721cd1;p=fa-stable.git

Additional security related fixes.
---

diff --git a/.htaccess b/.htaccess
index c80aa26e..ffcd03e6 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,3 +1,14 @@
+# Protect sensitive files.
+<FilesMatch "\.(inc|po|sh|.*sql)$">
+	Order allow,deny
+</FilesMatch>
+
+# Disable directory listings.
+Options -Indexes
+
+# Set the default index.
+DirectoryIndex index.php
+
 # These settings are recommended
 # Maybe you might have problems
 # with other scripts that needs