Skip to content

Commit 57643fa

Browse files
noplanaldersonnoplanalderson
committed
chore: Track .htaccess deny rules for logs and uploads
1 parent a0ce6fd commit 57643fa

3 files changed

Lines changed: 35 additions & 2 deletions

File tree

‎.gitignore‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,9 @@
33
!.env.example
44
/vendor/
55
/composer.lock
6-
/sample/application/logs/
7-
/sample/application/uploads/
6+
/sample/application/logs/*
7+
!/sample/application/logs/.htaccess
8+
/sample/application/uploads/*
9+
!/sample/application/uploads/.htaccess
810
*.log
911
*.gz

‎sample/application/logs/.htaccess‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
# Deny direct browser access to request analysis logs.
2+
<IfModule mod_authz_core.c>
3+
# Apache 2.4
4+
Require all denied
5+
</IfModule>
6+
<IfModule !mod_authz_core.c>
7+
# Apache 2.2
8+
Order deny,allow
9+
Deny from all
10+
</IfModule>
11+
12+
# Even if Apache is not parsing .htaccess, never serve raw log files.
13+
<FilesMatch "\.(log|gz)$">
14+
<IfModule mod_authz_core.c>
15+
Require all denied
16+
</IfModule>
17+
<IfModule !mod_authz_core.c>
18+
Order deny,allow
19+
Deny from all
20+
</IfModule>
21+
</FilesMatch>

‎sample/application/uploads/.htaccess‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
# Deny direct browser access to uploaded files.
2+
<IfModule mod_authz_core.c>
3+
# Apache 2.4
4+
Require all denied
5+
</IfModule>
6+
<IfModule !mod_authz_core.c>
7+
# Apache 2.2
8+
Order deny,allow
9+
Deny from all
10+
</IfModule>

0 commit comments

Comments
 (0)