diff --git a/workflow/public_html/.htaccess b/workflow/public_html/.htaccess index 458bcdada..5d0e4c170 100644 --- a/workflow/public_html/.htaccess +++ b/workflow/public_html/.htaccess @@ -3,7 +3,7 @@ Deny from all - + Order Allow,Deny Allow from All \ No newline at end of file diff --git a/workflow/public_html/sysGeneric.php b/workflow/public_html/sysGeneric.php index 0b32f04eb..4f79e9bb1 100644 --- a/workflow/public_html/sysGeneric.php +++ b/workflow/public_html/sysGeneric.php @@ -117,6 +117,10 @@ if (file_exists($requestFile)) { header( "location: /errors/error404.php?url=" . urlencode( $_SERVER['REQUEST_URI'] ) ); die; } + if ($request === "app.php" || $request === "sysGeneric.php") { + //HTTP/1.0 403 Forbidden + http_response_code(403); + } $pos = strripos($request, ".") + 1; $size = strlen($request); if($pos < $size) {