completed util directory protection; fixes #136

2013-05-16 15:36:14 +02:00 · 2013-05-16 15:36:14 +02:00 · 56d5d9f4f5
commit 56d5d9f4f5
parent e0a405b6a3
15 changed files with 65 additions and 0 deletions
--- a/.gitignore
+++ b/.gitignore
@ -10,6 +10,15 @@
 /htdocs/util/publish_caches/settings.inc.php
 /htdocs/util/watchlist/settings.inc.php

+# directory permissions
+# these files are contained in the repo, but can be overriden locally
+/htdocs/util/archive/.htaccess
+/htdocs/util/attributes/.htaccess
+/htdocs/util/change_owner/.htaccess
+/htdocs/util/delete/.htaccess
+/htdocs/util/mysql_root/.htaccess
+/htdocs/util/search_index/.htaccess
+
 # other data
 /htdocs/cache/*
 /htdocs/cache2/*
--- a/htdocs/util-local/.htaccess
+++ b/htdocs/util-local/.htaccess
@ -0,0 +1,4 @@
+<FilesMatch "*">
+Order Deny,Allow
+Deny from All
+</FilesMatch>
--- a/htdocs/util-local/mailing/.htaccess
+++ b/htdocs/util-local/mailing/.htaccess
@ -0,0 +1,4 @@
+<FilesMatch "*">
+Order Deny,Allow
+Deny from All
+</FilesMatch>
--- a/htdocs/util-local/maintenance/.htaccess
+++ b/htdocs/util-local/maintenance/.htaccess
@ -0,0 +1,4 @@
+<FilesMatch "*">
+Order Deny,Allow
+Deny from All
+</FilesMatch>
--- a/htdocs/util-local/ocxml11client/.htaccess
+++ b/htdocs/util-local/ocxml11client/.htaccess
@ -0,0 +1,4 @@
+<FilesMatch "*">
+Order Deny,Allow
+Deny from All
+</FilesMatch>
--- a/htdocs/util-local/prodsys/.htaccess
+++ b/htdocs/util-local/prodsys/.htaccess
@ -0,0 +1,4 @@
+<FilesMatch "*">
+Order Deny,Allow
+Deny from All
+</FilesMatch>
--- a/htdocs/util/archive/.htaccess
+++ b/htdocs/util/archive/.htaccess
@ -0,0 +1,4 @@
+AuthUserFile /path/to/passwdfile/.htpasswd
+AuthName "OC-Admin"
+AuthType Basic
+require valid-user
--- a/htdocs/util/attributes/.htaccess
+++ b/htdocs/util/attributes/.htaccess
@ -0,0 +1,4 @@
+AuthUserFile /path/to/passwdfile/.htpasswd
+AuthName "OC-Admin"
+AuthType Basic
+require valid-user
--- a/htdocs/util/change_owner/.htaccess
+++ b/htdocs/util/change_owner/.htaccess
@ -0,0 +1,4 @@
+AuthUserFile /path/to/passwdfile/.htpasswd
+AuthName "OC-Admin"
+AuthType Basic
+require valid-user
--- a/htdocs/util/delete/.htaccess
+++ b/htdocs/util/delete/.htaccess
@ -0,0 +1,4 @@
+AuthUserFile /path/to/passwdfile/.htpasswd
+AuthName "OC-Admin"
+AuthType Basic
+require valid-user
--- a/htdocs/util/mysql_root/.htaccess
+++ b/htdocs/util/mysql_root/.htaccess
@ -0,0 +1,4 @@
+<FilesMatch "*">
+Order Deny,Allow
+Deny from All
+</FilesMatch>
--- a/htdocs/util/search_index/.htaccess
+++ b/htdocs/util/search_index/.htaccess
@ -0,0 +1,4 @@
+<FilesMatch "*">
+Order Deny,Allow
+Deny from All
+</FilesMatch>
--- a/htdocs/util2/cron/.htaccess
+++ b/htdocs/util2/cron/.htaccess
@ -0,0 +1,4 @@
+<FilesMatch "*">
+Order Deny,Allow
+Deny from All
+</FilesMatch>
--- a/htdocs/util2/cron/modules/.htaccess
+++ b/htdocs/util2/cron/modules/.htaccess
@ -0,0 +1,4 @@
+<FilesMatch "*">
+Order Deny,Allow
+Deny from All
+</FilesMatch>
--- a/htdocs/util2/ocprop-cleanup/.htaccess
+++ b/htdocs/util2/ocprop-cleanup/.htaccess
@ -0,0 +1,4 @@
+<FilesMatch "*">
+Order Deny,Allow
+Deny from All
+</FilesMatch>