Added direct access prevention for Apache 2.4

This commit is contained in:
Billy Bouman 2020-06-14 13:51:20 +02:00
parent 1934b93353
commit 776bf183e6

View File

@ -13,8 +13,15 @@
# Prevent Direct Access to Protected Files # Prevent Direct Access to Protected Files
<FilesMatch "(?i)(^artisan$|\.env|\.log)"> <FilesMatch "(?i)(^artisan$|\.env|\.log)">
Order deny,allow # Apache 2.2 syntax
Deny from all <IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
# Apache 2.4 syntax
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
</FilesMatch> </FilesMatch>
# Prevent Direct Access To Protected Folders # Prevent Direct Access To Protected Folders