From 229302139e8d23bf6862183cf219b967f6e2fbc1 Mon Sep 17 00:00:00 2001 From: Julio Montoya Date: Mon, 19 Apr 2021 16:07:32 +0200 Subject: [PATCH] Update .htaccess. disallow PHP inside web/ --- .htaccess | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.htaccess b/.htaccess index 4614246128..d24712d053 100755 --- a/.htaccess +++ b/.htaccess @@ -12,7 +12,7 @@ RewriteEngine on RedirectMatch 403 ^/app/(?!courses/proxy)(cache|courses|home|logs|upload|Resources/public/css)/.*\.ph(p[3457]?|t|tml|ar)$ RedirectMatch 403 ^/main/default_course_document/images/.*\.ph(p[3457]?|t|tml|ar)$ RedirectMatch 403 ^/main/lang/.*\.ph(p[3457]?|t|tml|ar)$ -RedirectMatch 403 ^/web/css/.*\.ph(p[3457]?|t|tml|ar)$ +RedirectMatch 403 ^/web/.*\.ph(p[3457]?|t|tml|ar)$ # http://my.chamilo.net/certificates/?id=123 to http://my.chamilo.net/certificates/index.php?id=123 RewriteCond %{QUERY_STRING} ^id=(.*)$