bug #621 make htaccess deny in src and app work with apache 2.4 (Tobion)

fabpot · fabpot · commit e5bbafe6afbd · 2014-02-05T14:58:12.000+01:00
This PR was merged into the 2.3 branch. Discussion ---------- make htaccess deny in src and app work with apache 2.4 | Q | A | ------------- | --- | Bug fix? | yes | New feature? | no | BC breaks? | no | Deprecations? | |no | Tests pass? | yes | Fixed tickets | #602 | License | MIT Based on findings in https://drupal.org/node/1599774 Made it work under both apache 2.2 and 2.4. Commits ------- 38c2a50 make htaccess deny in src and app work with apache 2.4
diff --git a/app/.htaccess b/app/.htaccess
@@ -1 +1,7 @@
-deny from all
+<IfModule mod_authz_core.c>
+    Require all denied
+</IfModule>
+<IfModule !mod_authz_core.c>
+    Order deny,allow
+    Deny from all
+</IfModule>
diff --git a/src/.htaccess b/src/.htaccess
@@ -1 +1,7 @@
-deny from all
+<IfModule mod_authz_core.c>
+    Require all denied
+</IfModule>
+<IfModule !mod_authz_core.c>
+    Order deny,allow
+    Deny from all
+</IfModule>
