.htaccess

<IfModule mod_rewrite.c>
    <IfModule mod_negotiation.c>
        Options -MultiViews
    </IfModule>

    # Make sure .env files not not browseable if in a sub-directory.
    <FilesMatch "\.env$">
       # Apache 2.2
       <IfModule !authz_core_module>
          Deny from all
       </IfModule>
       
       # Apache 2.4+
       <IfModule authz_core_module>
          Require all denied
       </IfModule>
    </FilesMatch>
    
</IfModule>
Prevent direct viewing of .env file if installed in a subdirectory 2016-04-19 19:44:09 -07:00			`<IfModule mod_rewrite.c>`
			`<IfModule mod_negotiation.c>`
			`Options -MultiViews`
			`</IfModule>`

			`# Make sure .env files not not browseable if in a sub-directory.`
			`<FilesMatch "\.env$">`
Update .htaccess (#9001) .htaccess will work on both apache v2.2 and v2.4 (without this change, on upgrade, an internal error on the server occurs) 2021-01-26 22:20:03 +02:00			`# Apache 2.2`
			`<IfModule !authz_core_module>`
			`Deny from all`
			`</IfModule>`

			`# Apache 2.4+`
			`<IfModule authz_core_module>`
			`Require all denied`
			`</IfModule>`
Prevent direct viewing of .env file if installed in a subdirectory 2016-04-19 19:44:09 -07:00			`</FilesMatch>`

			`</IfModule>`