From: Heiko Adams <heiko.adams@gmail.com>
Date: Wed, 12 Aug 2015 19:09:35 +0000 (+0200)
Subject: protect .htaccess and config.php against accessing by strangers
X-Git-Tag: 16.3~137^2
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=4a02c2fd56629ac960a9cecbe7c77e1016efb54c;p=tt-rss.git

protect .htaccess and config.php against accessing by strangers
---

diff --git a/.htaccess b/.htaccess
index 22b33f00..bdf8c201 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,3 +1,16 @@
 AddType image/svg+xml svg
 AddType image/svg+xml svgz
 
+# PROTECT all htaccess files
+<Files ~ "^[\._]ht">
+  Order Allow,Deny
+  Deny from all
+  Satisfy All
+</Files>
+
+# PROTECT config.php
+<files config.php>
+  Order Allow,Deny
+  Deny from all
+  Satisfy all
+</files>
\ No newline at end of file