diff --git a/workflow/public_html/.htaccess b/workflow/public_html/.htaccess
index 458bcdada..5d0e4c170 100644
--- a/workflow/public_html/.htaccess
+++ b/workflow/public_html/.htaccess
@@ -3,7 +3,7 @@
Deny from all
-
+
Order Allow,Deny
Allow from All
\ No newline at end of file
diff --git a/workflow/public_html/sysGeneric.php b/workflow/public_html/sysGeneric.php
index 0b32f04eb..4f79e9bb1 100644
--- a/workflow/public_html/sysGeneric.php
+++ b/workflow/public_html/sysGeneric.php
@@ -117,6 +117,10 @@ if (file_exists($requestFile)) {
header( "location: /errors/error404.php?url=" . urlencode( $_SERVER['REQUEST_URI'] ) );
die;
}
+ if ($request === "app.php" || $request === "sysGeneric.php") {
+ //HTTP/1.0 403 Forbidden
+ http_response_code(403);
+ }
$pos = strripos($request, ".") + 1;
$size = strlen($request);
if($pos < $size) {