summaryrefslogtreecommitdiffstats
path: root/lib/private
diff options
context:
space:
mode:
authorMichaIng <micha@dietpi.com>2019-09-26 12:38:58 +0200
committerGitHub <noreply@github.com>2019-09-26 12:38:58 +0200
commitc7e66ec848cfce75b8eb3f635f21255e3967def2 (patch)
treead1ffd537b4611a4815373d780bcb435667c5624 /lib/private
parent592eecdb7d6b469515cb4231056a8208a548d0aa (diff)
downloadnextcloud-server-c7e66ec848cfce75b8eb3f635f21255e3967def2.tar.gz
nextcloud-server-c7e66ec848cfce75b8eb3f635f21255e3967def2.zip
Add "Order" to assure that no parental "Allow" can grant access
Signed-off-by: MichaIng <micha@dietpi.com>
Diffstat (limited to 'lib/private')
-rw-r--r--lib/private/Setup.php2
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/private/Setup.php b/lib/private/Setup.php
index 7811754ddce..3fbfc3da2ba 100644
--- a/lib/private/Setup.php
+++ b/lib/private/Setup.php
@@ -547,6 +547,7 @@ class Setup {
$content .= " Require all denied\n";
$content .= "</IfModule>\n";
$content .= "<IfModule mod_access_compat.c>\n";
+ $content .= " Order Allow,Deny";
$content .= " Deny from all\n";
$content .= " Satisfy All\n";
$content .= "</IfModule>\n\n";
@@ -554,6 +555,7 @@ class Setup {
$content .= "<IfModule !mod_authz_core.c>\n";
$content .= " <IfModule !mod_access_compat.c>\n";
$content .= " <IfModule mod_authz_host.c>\n";
+ $content .= " Order Allow,Deny";
$content .= " Deny from all\n";
$content .= " <IifModule>\n";
$content .= " Satisfy All\n";