Block script execution inside upload folders

chamilo · Feb 15, 2017 · 337c3e6 · 337c3e6
1 parent 4387516
commit 337c3e6
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/app/home/.htaccess b/app/home/.htaccess
@@ -0,0 +1,3 @@
+<FilesMatch "(?i)\.(php5|php4|php|php3|php2|phtml|pl|py|jsp|asp|sh|cgi)$">
+    deny from all
+</FilesMatch>
diff --git a/app/upload/.htaccess b/app/upload/.htaccess
@@ -0,0 +1,3 @@
+<FilesMatch "(?i)\.(php5|php4|php|php3|php2|phtml|pl|py|jsp|asp|sh|cgi)$">
+    deny from all
+</FilesMatch>