add gz to access denied files to block rotated logs from public access

2013-07-26 03:50:46 -07:00
parent 7f87da68ba
commit 53118a4352
85 changed files with 1078 additions and 1322 deletions
--- a/.htaccess
+++ b/.htaccess
@@ -2,7 +2,8 @@ Options -Indexes
 AddType application/x-java-archive .jar
 AddType audio/ogg .oga

-<FilesMatch "\.(out|log)$">
+# don't allow any web access to logfiles, even after rotation/compression
+<FilesMatch "\.(out|log|gz)$">
 Deny from all
 </FilesMatch>