.htaccess: Block access to all files in content

This commit is contained in:
Lukas Bestle
2020-06-15 20:00:56 +02:00
committed by Bastian Allgeier
parent e64a392079
commit 61729df53a

4
.htaccess Executable file → Normal file
View File

@@ -25,8 +25,8 @@ RewriteEngine on
# except for the .well-known folder, which is used for Let's Encrypt and security.txt
RewriteRule (^|/)\.(?!well-known\/) index.php [L]
# block text files in the content folder from being accessed directly
RewriteRule ^content/(.*)\.(txt|md|mdown)$ index.php [L]
# block all files in the content folder from being accessed directly
RewriteRule ^content/(.*) index.php [L]
# block all files in the site folder from being accessed directly
# except for requests to plugin assets files