Merged in bugfix/HOR-2604 (pull request #5379)

HOR-2604

Approved-by: Julio Cesar Laura Avendaño
Approved-by: Paula Quispe
This commit is contained in:
Roly
2017-02-10 14:31:25 +00:00
committed by Julio Cesar Laura Avendaño
2 changed files with 5 additions and 1 deletions

View File

@@ -3,7 +3,7 @@
Deny from all Deny from all
</FilesMatch> </FilesMatch>
<FilesMatch "^(app|sysGeneric)\.php$"> <FilesMatch "^(app|sysGeneric|gmail)\.php">
Order Allow,Deny Order Allow,Deny
Allow from All Allow from All
</FilesMatch> </FilesMatch>

View File

@@ -117,6 +117,10 @@ if (file_exists($requestFile)) {
header( "location: /errors/error404.php?url=" . urlencode( $_SERVER['REQUEST_URI'] ) ); header( "location: /errors/error404.php?url=" . urlencode( $_SERVER['REQUEST_URI'] ) );
die; die;
} }
if ($request === "app.php" || $request === "sysGeneric.php") {
//HTTP/1.0 403 Forbidden
http_response_code(403);
}
$pos = strripos($request, ".") + 1; $pos = strripos($request, ".") + 1;
$size = strlen($request); $size = strlen($request);
if($pos < $size) { if($pos < $size) {