From 4e7d0252e64d2d0fbd49837871f70e655116eabb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Jakes=CC=8C?= <jan@jakes.pro>
Date: Mon, 23 Sep 2019 16:01:11 +0200
Subject: [PATCH] Add .htaccess files with access settings

[MAILPOET-1949]
---
 .htaccess        | 15 +++++++++++++++
 assets/.htaccess | 12 ++++++++++++
 2 files changed, 27 insertions(+)
 create mode 100644 .htaccess
 create mode 100644 assets/.htaccess

diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000000..a88faa7f13
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,15 @@
+# disable directory listing
+Options -Indexes
+
+# disable file serving (Apache 2.4)
+<IfModule mod_authz_core.c>
+  Require all denied
+</IfModule>
+
+# disable file serving (Apache 2.2)
+<IfModule !mod_authz_core.c>
+  <IfModule mod_authz_host.c>
+    Order deny,allow
+    Deny from all
+  </IfModule>
+</IfModule>
diff --git a/assets/.htaccess b/assets/.htaccess
new file mode 100644
index 0000000000..117f7eb8dd
--- /dev/null
+++ b/assets/.htaccess
@@ -0,0 +1,12 @@
+# enable file serving (Apache 2.4)
+<IfModule mod_authz_core.c>
+  Require all granted
+</IfModule>
+
+# enable file serving (Apache 2.2)
+<IfModule !mod_authz_core.c>
+  <IfModule mod_authz_host.c>
+    Order allow,deny
+    Allow from all
+  </IfModule>
+</IfModule>