Merge pull request #1482 from boumanb/master

Added correct direct access prevention syntax on sensitive files for Apache 2.4
2020-06-17 11:23:30 +03:00 · 2020-06-17 11:23:30 +03:00 · 36617de61f
commit 36617de61f
parent 2ce18705c3 776bf183e6
1 changed files with 9 additions and 2 deletions
--- a/.htaccess
+++ b/.htaccess
@ -13,8 +13,15 @@

    # Prevent Direct Access to Protected Files
    <FilesMatch "(?i)(^artisan$|\.env|\.log)">
-        Order deny,allow
-        Deny from all
+        # Apache 2.2 syntax
+        <IfModule !mod_authz_core.c>
+            Order deny,allow
+            Deny from all
+        </IfModule>
+        # Apache 2.4 syntax
+        <IfModule mod_authz_core.c>
+            Require all denied
+        </IfModule>
    </FilesMatch>

    # Prevent Direct Access To Protected Folders