|
@@ -14,8 +14,8 @@ Options -Indexes
|
|
|
# Block hidden files/folders except ACME challenge path.
|
|
# Block hidden files/folders except ACME challenge path.
|
|
|
RewriteRule "(^|/)\.(?!well-known/)" - [F]
|
|
RewriteRule "(^|/)\.(?!well-known/)" - [F]
|
|
|
|
|
|
|
|
- # Deny direct access to writable data directory (centralized, no data/.htaccess needed).
|
|
|
|
|
- RewriteRule ^data(?:/|$) - [F,L]
|
|
|
|
|
|
|
+ # Deny direct access to writable data directory except uploads.
|
|
|
|
|
+ RewriteRule ^data/(?!uploads/)(?:/|$) - [F,L]
|
|
|
</IfModule>
|
|
</IfModule>
|
|
|
|
|
|
|
|
<IfModule mod_authz_core.c>
|
|
<IfModule mod_authz_core.c>
|