[packages/stikked] deny access system and whole application dir

glen glen at pld-linux.org
Sun Mar 16 02:47:27 CET 2014


commit fdea84f14fa0a3b025c50fbadb32276e3a47cf37
Author: Elan Ruusamäe <glen at delfi.ee>
Date:   Sun Mar 16 03:47:09 2014 +0200

    deny access system and whole application dir

 apache.conf   | 2 +-
 lighttpd.conf | 2 +-
 stikked.spec  | 5 ++++-
 3 files changed, 6 insertions(+), 3 deletions(-)
---
diff --git a/stikked.spec b/stikked.spec
index 75c656d..d99c81e 100644
--- a/stikked.spec
+++ b/stikked.spec
@@ -1,7 +1,7 @@
 Summary:	Stikked is an Open-Source PHP Pastebin
 Name:		stikked
 Version:	0.8.6
-Release:	0.11
+Release:	0.12
 License:	CC0
 Group:		Applications/WWW
 Source0:	https://github.com/claudehohl/Stikked/archive/%{version}/%{name}-%{version}.tar.gz
@@ -47,6 +47,9 @@ rm htdocs/application/libraries/index.html
 rm htdocs/application/logs/index.html
 rm htdocs/application/models/index.html
 rm htdocs/application/third_party/index.html
+rm htdocs/application/.htaccess
+rm htdocs/application/cache/.htaccess
+rm htdocs/system/.htaccess
 
 # this is to simplify install
 mv htdocs/application/config .
diff --git a/apache.conf b/apache.conf
index 73b6fdf..0b30979 100644
--- a/apache.conf
+++ b/apache.conf
@@ -42,7 +42,7 @@ Alias /stikked /usr/share/stikked
 	</IfModule>
 </Directory>
 
-<Directory ~ "/usr/share/stikked/application/(config|cache|controllers|core|errors|helpers|hooks|libraries|logs|models|third_party)">
+<Directory ~ "/usr/share/stikked/(system|application)">
     # Apache 2.x
     <IfModule !mod_authz_core.c>
         Order deny,allow
diff --git a/lighttpd.conf b/lighttpd.conf
index 8a31163..0715d6f 100644
--- a/lighttpd.conf
+++ b/lighttpd.conf
@@ -11,6 +11,6 @@ url.rewrite-once += (
 	"^" + var.stikked_url + "/(.*)$" => var.stikked_url + "/index.php$2",
 )
 
-$HTTP["url"] =~ "^" + var.stikked_url + "/(config|cache|controllers|core|errors|helpers|hooks|libraries|logs|models|third_party)" {
+$HTTP["url"] =~ "^" + var.stikked_url + "/(system|application)" {
     url.access-deny = ("")
 }
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/stikked.git/commitdiff/fdea84f14fa0a3b025c50fbadb32276e3a47cf37



More information about the pld-cvs-commit mailing list