From 79b623e0dd68bc07c2bcf20f14b0141b33d81ace Mon Sep 17 00:00:00 2001 From: Tomas Cohen Arazi Date: Wed, 13 Mar 2013 14:24:20 -0300 Subject: [PATCH] Bug 9812 - Forbid access to several files through the browser This patch hides (-Indexes) and forbids (Deny from all) access to some stuff through a browser. Specifically "xlst", "modules" and "includes" dirs and its contents. This is just a quick fix we talked about at IRC. The proper solution would be to remove this from htdocs which will still be needed. Signed-off-by: Chris Cormack Signed-off-by: Jonathan Druart --- etc/koha-httpd.conf | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/etc/koha-httpd.conf b/etc/koha-httpd.conf index 0e7af51..bba91ca 100644 --- a/etc/koha-httpd.conf +++ b/etc/koha-httpd.conf @@ -20,6 +20,16 @@ SetEnv MEMCACHED_SERVERS "__MEMCACHED_SERVERS__" SetEnv MEMCACHED_NAMESPACE "__MEMCACHED_NAMESPACE__" + + Options -Indexes + + + # Secure internal stuff + + Order deny,allow + Deny from all + + mod_gzip_on yes mod_gzip_dechunk yes @@ -120,6 +130,16 @@ ErrorDocument 404 /cgi-bin/koha/errors/404.pl ErrorDocument 500 /cgi-bin/koha/errors/500.pl + + Options -Indexes + + + # Secure internal stuff + + Order deny,allow + Deny from all + + mod_gzip_on yes mod_gzip_dechunk yes -- 1.7.10.4