Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The Nginx configuration, which is recommended by the documentation, allows public access to the hidden server files (e.g., «.htaccess») inside the «web» folder #238

Open
dmitrii-fediuk opened this issue May 19, 2017 · 1 comment

Comments

@dmitrii-fediuk
Copy link

dmitrii-fediuk commented May 19, 2017

I propose to add the rule:

location ~ /\. {deny all;}

https://www.orocrm.com/documentation/2.0/book/installation#step-3-web-server-configuration

@vbyndych
Copy link
Contributor

Thank you for your suggestion. We will check our guide.

Internal ID: OD-323

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

2 participants