Prevent direct viewing of .env file if installed in a subdirectory

zybersup · Apr 20, 2016 · b2e5fa8 · b2e5fa8
1 parent 5c99f9d
commit b2e5fa8
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/.htaccess b/.htaccess
@@ -0,0 +1,11 @@
+<IfModule mod_rewrite.c>
+    <IfModule mod_negotiation.c>
+        Options -MultiViews
+    </IfModule>
+
+    # Make sure .env files not not browseable if in a sub-directory.
+    <FilesMatch "\.env$">
+    Deny from all
+    </FilesMatch>
+
+</IfModule>