Mirrors/roundcubemail
2
0
Fork 0
mirror of https://github.com/roundcube/roundcubemail.git synced 2026-02-20 01:21:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

Improve directory protection for Apache 2.4

Browse Source
This commit is contained in:
Thomas Bruederli
2015-05-07 14:13:02 +02:00
parent 012555c1ce
commit 585ee9e181
4 changed files with 24 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
INSTALL
View File

@@ -169,6 +169,12 @@ rewrite rules. In order to properly secure your installation, please enable
mod_rewrite for Apache webserver and double check access to the above listed mod_rewrite for Apache webserver and double check access to the above listed
directories and their contents is denied. directories and their contents is denied.
NOTE: In Apache 2.4, support for .htaccess files has been disabled by
default. Therefore you first need to enable this in your Apache main or
virtual host config by with:
AllowOverride all
UPGRADING UPGRADING
========= =========

7
config/.htaccess
View File

@@ -1,2 +1,7 @@
# deny webserver access to this directory # deny webserver access to this directory
Deny from all <ifModule mod_authz_core.c>
Require all denied
</ifModule>
<ifModule !mod_authz_core.c>
Deny from all
</ifModule>

7
logs/.htaccess
View File

@@ -1,2 +1,7 @@
# deny webserver access to this directory # deny webserver access to this directory
Deny from all <ifModule mod_authz_core.c>
Require all denied
</ifModule>
<ifModule !mod_authz_core.c>
Deny from all
</ifModule>

7
temp/.htaccess
View File

@@ -1,2 +1,7 @@
# deny webserver access to this directory # deny webserver access to this directory
Deny from all <ifModule mod_authz_core.c>
Require all denied
</ifModule>
<ifModule !mod_authz_core.c>
Deny from all
</ifModule>