From 6df9d36dd5c2725169533d363e5453103ea27b56 Mon Sep 17 00:00:00 2001
From: "marcelo.cuiza" <marcelo.cuiza@colosa.com>
Date: Mon, 30 Mar 2015 10:41:40 -0400
Subject: [PATCH 1/2] PM-1992

Se puede acceder a los archivos de logs y otros que se encuentran en la carpeta workflow/public_hmtl

Se restringio el acceso en workflow/public_hmtl de archivos con extension htaccess|php|ini|log|sh|inc|bak, es posible configurar estas extensiones en workflow/public_hmtl/.htaccess
---
 workflow/public_html/.htaccess | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 workflow/public_html/.htaccess

diff --git a/workflow/public_html/.htaccess b/workflow/public_html/.htaccess
new file mode 100644
index 000000000..f45557cab
--- /dev/null
+++ b/workflow/public_html/.htaccess
@@ -0,0 +1,9 @@
+<FilesMatch "\.(htaccess|php|ini|log|sh|inc|bak)$">
+        Order Allow,Deny
+        Deny from all
+</FilesMatch>
+
+<FilesMatch "^(app|sysGeneric)\.php$">
+        Order Allow,Deny 
+        Allow from All 
+</FilesMatch>
\ No newline at end of file

From 1d5f19e2b5ee3f3e5607f528b985877706d2f7a6 Mon Sep 17 00:00:00 2001
From: "marcelo.cuiza" <marcelo.cuiza@colosa.com>
Date: Mon, 30 Mar 2015 10:44:33 -0400
Subject: [PATCH 2/2] PM-1992

Se puede acceder a los archivos de logs y otros que se encuentran en la carpeta workflow/public_hmtl

Se restringio el acceso en workflow/public_hmtl de archivos con extension htaccess|php|ini|log|sh|inc|bak|config, es posible configurar estas extensiones en workflow/public_hmtl/.htaccess
---
 workflow/public_html/.htaccess | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/workflow/public_html/.htaccess b/workflow/public_html/.htaccess
index f45557cab..458bcdada 100644
--- a/workflow/public_html/.htaccess
+++ b/workflow/public_html/.htaccess
@@ -1,4 +1,4 @@
-<FilesMatch "\.(htaccess|php|ini|log|sh|inc|bak)$">
+<FilesMatch "\.(htaccess|php|ini|log|sh|inc|bak|config)$">
         Order Allow,Deny
         Deny from all
 </FilesMatch>