From d485664404d44bb371fd9b8a5b23ad8327cea302 Mon Sep 17 00:00:00 2001 From: Andreas Fischer Date: Fri, 15 Oct 2010 16:47:21 +0200 Subject: [PATCH] [ticket/9698] Add .htaccess to the includes subdirectory. Add .htaccess to the includes folder to prevent full path disclosure when running PHP 5.3. When the error_reporting setting in php.ini contains the E_DEPRECATED error level, the PHP parser throws an error message containing the local filesystem path when accessing one of the captcha plugins directly. This is because the captcha plugins return explicit references for PHP 4 compatibility. PHPBB3-9698 --- phpBB/includes/.htaccess | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 phpBB/includes/.htaccess diff --git a/phpBB/includes/.htaccess b/phpBB/includes/.htaccess new file mode 100644 index 0000000000..4128d345ab --- /dev/null +++ b/phpBB/includes/.htaccess @@ -0,0 +1,4 @@ + + Order Allow,Deny + Deny from All +