v1.0.1

noplanalderson released this 02 Sep 02:21

· 2 commits to main since this release

57643fa

[1.0.1] - 2026-09-02

Fixed

Logs could be fetched directly from the browser. Added deny rules:
- sample/application/logs/.htaccess and sample/application/uploads/.htaccess
  that block direct access (Apache 2.2/2.4) including a *.log / *.gz guard.
- New "Security" section in the README covering moving application/ out of
  the web root, pointing REQUEST_LOG_DIR outside the document root, and
  Apache/Nginx deny configuration.

Assets 2