1
0
mirror of https://github.com/phpbb/phpbb.git synced 2025-05-30 19:24:13 +02:00

4 Commits

Author SHA1 Message Date
MichaIng
eff277a872 [ticket/16556] Remove purposeless <Files "*"> from .htaccess
Wrapping access permissions into <Files "*"> at best has zero effect
and implies unnecessary code and parsing for the web server. At least
it does not block access to files only, but still denies auto indexing
and access to sub directories effectively as well. But removing this
directive is still the cleaner and safer way to deny access to any
kind of resource that is provided within the directory in question.

To deny access to migration data, a single .htaccess file can be used.
This reduces the effort for future changes and it is not required
anymore to create new .htaccess files for every new migration
directory.

Additionally this corrects the fact the "Require" is part of
"mod_authz_core", not "mod_authz_host".

PHPBB3-16556

Signed-off-by: MichaIng <micha@dietpi.com>
2020-09-01 18:19:13 +02:00
MichaIng
bd4887f660
[ticket/16554] Align all .htaccess files to support Apache 2.4 directives
While the main .htaccess as well as the ones in phpbb/db/migration/data/vXYZ/
do already support the Apache 2.4 mod_authz_core directive "Require all denied",
all others still use only the deprecated "Deny from All". To not force modern
system to use the mod_access_compat module, the modern directives should be
supported in every case.

For this, the method of phpbb/db/migration/data/vXYZ/.htaccess is copied to
update and align all .htaccess files across the source code.

PHPBB3-16554

Signed-off-by: MichaIng <micha@dietpi.com>
2020-07-21 11:21:29 +02:00
Igor Wiedler
8a264228d0 [feature/dic] Add trailing newline to htaccess
PHPBB3-10739
2012-07-26 15:58:26 +02:00
Igor Wiedler
aa0c995ed9 [feature/dic] Protect config directory via .htaccess
PHPBB3-10739
2012-04-09 13:15:27 +02:00