Additional security related fixes.
authorJanusz Dobrowolski <janusz@frontaccounting.eu>
Mon, 22 Nov 2010 21:06:35 +0000 (21:06 +0000)
committerJanusz Dobrowolski <janusz@frontaccounting.eu>
Mon, 22 Nov 2010 21:06:35 +0000 (21:06 +0000)
.htaccess

index c80aa26e7548e5c169d024ebce63009d06837e49..ffcd03e635c5769da99c54e894d4dc230c78ac49 100644 (file)
--- a/.htaccess
+++ b/.htaccess
@@ -1,3 +1,14 @@
+# Protect sensitive files.
+<FilesMatch "\.(inc|po|sh|.*sql)$">
+       Order allow,deny
+</FilesMatch>
+
+# Disable directory listings.
+Options -Indexes
+
+# Set the default index.
+DirectoryIndex index.php
+
 # These settings are recommended
 # Maybe you might have problems
 # with other scripts that needs