동작 외 필요하지 않은 파일에 대한 접근 제한 및 files 디렉토리 접근 제한 rewrite 설정 추가

xpressengine · Apr 14, 2017 · be3578d · Lastorder-DC · Apr 14, 2017 · be3578d
1 parent 20b897f
commit be3578d
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.htaccess b/.htaccess
@@ -1,5 +1,12 @@
 RewriteEngine On
 
+RewriteRule ^(.*/)?\.(.+)$ - [L,F]
+RewriteRule ^codeception(.*?).yml$ - [L,F]
+RewriteRule ^composer(.*?).(json|lock)$ - [L,F]
+RewriteRule ^files/.+\.php$ - [L,F]
+RewriteRule ^files/(attach|config|cache/store)/.+\.php$ - [L,F]
+RewriteRule ^files/(env|member_extra_info/(new_message_flags|point))/ - [L,F]
+
 # reserve XE Layout Template Source File (*.html)
 RewriteRule ^(layouts|m.layouts|files/faceOff)/(.+)\.html$ - [L,F]
 # reserve XE Template Source Files (*.html)