tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'ent-5361-vulnerabilidad-subir-ficheros' into 'develop' 

adding .htaccess files

See merge request artica/pandorafms!3026
This commit is contained in:
Alejandro Fraguas 2020-02-03 12:36:01 +01:00
parent 12d8dca70e c200f57856
commit 6c93fcfe02
3 changed files with 18 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
pandora_console/.htaccess Normal file
View File

@ -0,0 +1,2 @@
# pandora disable listing
Options -Indexes

14
pandora_console/attachment/.htaccess
View File

@ -1,3 +1,11 @@
Order deny,allow #Order deny,allow
Deny from All #Deny from All
Allow from localhost #Allow from localhost
#pandora disable phpexec
<FilesMatch "\.(txt|php)$">
Deny from all
Allow from localhost
</FilesMatch>
php_flag engine off

5
pandora_console/images/.htaccess Normal file
View File

@ -0,0 +1,5 @@
#pandora disable phpexec
<Files *.php>
Deny from all
</Files>
php_flag engine off