summaryrefslogtreecommitdiffstats
path: root/config
diff options
context:
space:
mode:
authorRoeland Jago Douma <rullzer@users.noreply.github.com>2019-12-19 11:26:12 +0100
committerGitHub <noreply@github.com>2019-12-19 11:26:12 +0100
commit5d9fd7ba0cced84f1d07627b0860ac5490de164d (patch)
tree533760297f9cdfca951c13b67ef5bf3f5250a78d /config
parent79b9be7ebfdbae41022416fd2645f2e9d597c8c1 (diff)
parent4384806f616cf7b9f6a4492ba2fd094afd064f86 (diff)
downloadnextcloud-server-5d9fd7ba0cced84f1d07627b0860ac5490de164d.tar.gz
nextcloud-server-5d9fd7ba0cced84f1d07627b0860ac5490de164d.zip
Merge pull request #16792 from MichaIng/patch-1
Harden data and config protection .htaccess
Diffstat (limited to 'config')
-rw-r--r--config/.htaccess35
1 files changed, 23 insertions, 12 deletions
diff --git a/config/.htaccess b/config/.htaccess
index 853aed187d3..13ca28758cf 100644
--- a/config/.htaccess
+++ b/config/.htaccess
@@ -1,14 +1,25 @@
-# line below if for Apache 2.4
-<ifModule mod_authz_core.c>
-Require all denied
-</ifModule>
+# Section for Apache 2.4 to 2.6
+<IfModule mod_authz_core.c>
+ Require all denied
+</IfModule>
+<IfModule mod_access_compat.c>
+ Order Allow,Deny
+ Deny from all
+ Satisfy All
+</IfModule>
-# line below if for Apache 2.2
-<ifModule !mod_authz_core.c>
-deny from all
-</ifModule>
+# Section for Apache 2.2
+<IfModule !mod_authz_core.c>
+ <IfModule !mod_access_compat.c>
+ <IfModule mod_authz_host.c>
+ Order Allow,Deny
+ Deny from all
+ </IfModule>
+ Satisfy All
+ </IfModule>
+</IfModule>
-# section for Apache 2.2 and 2.4
-<ifModule mod_autoindex.c>
-IndexIgnore *
-</ifModule>
+# Section for Apache 2.2 to 2.6
+<IfModule mod_autoindex.c>
+ IndexIgnore *
+</IfModule>