Deny access to composer.phar in .htaccess

This file might be present if users strictly follow our install instructions
 and don't delete it on their own after successfully installing Pico.
This commit is contained in:
Daniel Rudolf 2018-01-27 21:03:45 +01:00
parent b6bd714e52
commit 6bb65fb12b
No known key found for this signature in database
GPG Key ID: A061F02CD8DE4538
1 changed files with 1 additions and 1 deletions

View File

@ -5,7 +5,7 @@
# Deny access to internal dirs and files by passing the URL to Pico
RewriteRule ^(config|content|content-sample|lib|vendor)(/|$) index.php [L]
RewriteRule ^(CHANGELOG\.md|composer\.(json|lock))(/|$) index.php [L]
RewriteRule ^(CHANGELOG\.md|composer\.(json|lock|phar))(/|$) index.php [L]
RewriteRule (^\.|/\.)(?!well-known(/|$)) index.php [L]
# Enable URL rewriting