From 53118a43522d70258a4913709d9cd056f4cb5438 Mon Sep 17 00:00:00 2001
From: friendica <info@friendica.com>
Date: Fri, 26 Jul 2013 03:50:46 -0700
Subject: add gz to access denied files to block rotated logs from public
 access

---
 .htaccess | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to '.htaccess')

diff --git a/.htaccess b/.htaccess
index 6cb3a0749..090ae6637 100644
--- a/.htaccess
+++ b/.htaccess
@@ -2,7 +2,8 @@ Options -Indexes
 AddType application/x-java-archive .jar
 AddType audio/ogg .oga
 
-<FilesMatch "\.(out|log)$">
+# don't allow any web access to logfiles, even after rotation/compression
+<FilesMatch "\.(out|log|gz)$">
 Deny from all
 </FilesMatch>
 
-- 
cgit v1.2.3