1 files changed, 5 insertions, 1 deletions
diff --git a/.htaccess b/.htaccess
index 6cb3a0749..39fd89e04 100644
--- a/.htaccess
+++ b/.htaccess
@@ -1,8 +1,10 @@
 Options -Indexes
 AddType application/x-java-archive .jar
 AddType audio/ogg .oga
+#SSLCipherSuite HIGH:AES256-SHA:AES128-SHA:RC4:!aNULL:!eNULL:!EDH
 
-<FilesMatch "\.(out|log)$">
+# don't allow any web access to logfiles, even after rotation/compression
+<FilesMatch "\.(out|log|gz)$">
 Deny from all
 </FilesMatch>
 
@@ -10,6 +12,8 @@ Deny from all
   RewriteEngine on
   # Protect repository directory from browsing
   RewriteRule "(^|/)\.git" - [F]
+  RewriteRule "(^|/)store" - [F]
+
 
   # Rewrite current-style URLs of the form 'index.php?q=x'.
   # Also place auth information into REMOTE_USER for sites running