aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/phpbb/db/migration/data/v320
diff options
context:
space:
mode:
authorMarc Alexander <admin@m-a-styles.de>2016-11-13 11:45:42 +0100
committerMarc Alexander <admin@m-a-styles.de>2016-11-13 12:29:31 +0100
commit78c2e31ec2cab20f5fc0555706b27b63ad7d9437 (patch)
treeecf5b0b32631794673cbb2ef1b8eb93b03db00bf /phpBB/phpbb/db/migration/data/v320
parenta2953cb10c6f9318868b8727dd9e86cf419ff66c (diff)
downloadforums-78c2e31ec2cab20f5fc0555706b27b63ad7d9437.tar
forums-78c2e31ec2cab20f5fc0555706b27b63ad7d9437.tar.gz
forums-78c2e31ec2cab20f5fc0555706b27b63ad7d9437.tar.bz2
forums-78c2e31ec2cab20f5fc0555706b27b63ad7d9437.tar.xz
forums-78c2e31ec2cab20f5fc0555706b27b63ad7d9437.zip
[ticket/security-181] Add .htaccess to 3.2.x migrations
SECURITY-181
Diffstat (limited to 'phpBB/phpbb/db/migration/data/v320')
-rw-r--r--phpBB/phpbb/db/migration/data/v320/.htaccess33
1 files changed, 33 insertions, 0 deletions
diff --git a/phpBB/phpbb/db/migration/data/v320/.htaccess b/phpBB/phpbb/db/migration/data/v320/.htaccess
new file mode 100644
index 0000000000..44242b5418
--- /dev/null
+++ b/phpBB/phpbb/db/migration/data/v320/.htaccess
@@ -0,0 +1,33 @@
+# With Apache 2.4 the "Order, Deny" syntax has been deprecated and moved from
+# module mod_authz_host to a new module called mod_access_compat (which may be
+# disabled) and a new "Require" syntax has been introduced to mod_authz_host.
+# We could just conditionally provide both versions, but unfortunately Apache
+# does not explicitly tell us its version if the module mod_version is not
+# available. In this case, we check for the availability of module
+# mod_authz_core (which should be on 2.4 or higher only) as a best guess.
+<IfModule mod_version.c>
+ <IfVersion < 2.4>
+ <Files "*">
+ Order Allow,Deny
+ Deny from All
+ </Files>
+ </IfVersion>
+ <IfVersion >= 2.4>
+ <Files "*">
+ Require all denied
+ </Files>
+ </IfVersion>
+</IfModule>
+<IfModule !mod_version.c>
+ <IfModule !mod_authz_core.c>
+ <Files "*">
+ Order Allow,Deny
+ Deny from All
+ </Files>
+ </IfModule>
+ <IfModule mod_authz_core.c>
+ <Files "*">
+ Require all denied
+ </Files>
+ </IfModule>
+</IfModule>