Block script execution inside upload folders

9 years ago · 337c3e6d25
parent 4387516cbe
commit 337c3e6d25
2 changed files with 6 additions and 0 deletions
--- a/app/home/.htaccess
+++ b/app/home/.htaccess
@ -0,0 +1,3 @@
+<FilesMatch "(?i)\.(php5|php4|php|php3|php2|phtml|pl|py|jsp|asp|sh|cgi)$">
+    deny from all
+</FilesMatch>
--- a/app/upload/.htaccess
+++ b/app/upload/.htaccess
@ -0,0 +1,3 @@
+<FilesMatch "(?i)\.(php5|php4|php|php3|php2|phtml|pl|py|jsp|asp|sh|cgi)$">
+    deny from all
+</FilesMatch>