Robot
/
htaccess
mirror of https://github.com/phanan/htaccess.git
2
0
Fork 0
Code Issues Releases Wiki Activity

Added an alternative rule to deny access to hidden files

This commit is contained in:
An Phan 2015-02-09 15:30:34 +08:00
parent a79f9201cd
commit 5b44d452a9
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
README.md
View File

@ -120,6 +120,11 @@ RewriteCond %{SCRIPT_FILENAME} -f
RewriteRule "(^|/)\." - [F]
```
Alternatively, you can just raise a `Not Found` error, giving the attacker dude no clue:
``` apacheconf
RedirectMatch 404 /\..*$
```
### Deny Access to Backup and Source Files
These files may be left by some text/html editors (like Vi/Vim) and pose a great security danger, when anyone can access them.
``` apacheconf