From 61729df53aea3b80a54a64ec95de784fcd1369ad Mon Sep 17 00:00:00 2001 From: Lukas Bestle Date: Mon, 15 Jun 2020 20:00:56 +0200 Subject: [PATCH] .htaccess: Block access to all files in content --- .htaccess | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) mode change 100755 => 100644 .htaccess diff --git a/.htaccess b/.htaccess old mode 100755 new mode 100644 index 80cc848..f1caf43 --- a/.htaccess +++ b/.htaccess @@ -25,8 +25,8 @@ RewriteEngine on # except for the .well-known folder, which is used for Let's Encrypt and security.txt RewriteRule (^|/)\.(?!well-known\/) index.php [L] -# block text files in the content folder from being accessed directly -RewriteRule ^content/(.*)\.(txt|md|mdown)$ index.php [L] +# block all files in the content folder from being accessed directly +RewriteRule ^content/(.*) index.php [L] # block all files in the site folder from being accessed directly # except for requests to plugin assets files