From 44cd7d1b9aa675aa9ad1f16fd2217aa5c2411e98 Mon Sep 17 00:00:00 2001 From: Tomas Cohen Arazi Date: Wed, 13 Mar 2013 14:24:20 -0300 Subject: [PATCH] Bug 9812 - Forbid access to several files through the browser This patch hides (-Indexes) and forbids (Deny from all) access to some stuff through a browser. Specifically "xlst", "modules" and "includes" dirs and its contents. This is just a quick fix we talked about at IRC. The proper solution would be to remove this from htdocs which will still be needed. --- etc/koha-httpd.conf | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/etc/koha-httpd.conf b/etc/koha-httpd.conf index dc82d08..f591e0a 100644 --- a/etc/koha-httpd.conf +++ b/etc/koha-httpd.conf @@ -20,6 +20,15 @@ SetEnv MEMCACHED_SERVERS "__MEMCACHED_SERVERS__" SetEnv MEMCACHED_NAMESPACE "__MEMCACHED_NAMESPACE__" + + Options -Indexes + + # Secure internal stuff + + Order deny,allow + Deny from all + + mod_gzip_on yes mod_gzip_dechunk yes @@ -119,6 +128,16 @@ ErrorDocument 404 /cgi-bin/koha/errors/404.pl ErrorDocument 500 /cgi-bin/koha/errors/500.pl + + Options -Indexes + + + # Secure internal stuff + + Order deny,allow + Deny from all + + mod_gzip_on yes mod_gzip_dechunk yes -- 1.7.10.4