From 0016cde2fe143643e95a878c53b1c95b318d5aa4 Mon Sep 17 00:00:00 2001
From: Thomas Bruederli <thomas@roundcube.net>
Date: Sun, 10 Feb 2013 08:49:23 -0500
Subject: [PATCH] Fix rewrite rule to actually prevent access to bin/ and SQL/ directories

---
 .htaccess |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/.htaccess b/.htaccess
index 25e153f..481bd09 100644
--- a/.htaccess
+++ b/.htaccess
@@ -31,7 +31,8 @@
 RewriteRule ^favicon\.ico$ skins/larry/images/favicon.ico
 # security rules
 RewriteRule .git - [F]
-RewriteRule ^/?(README(.md)?|INSTALL|LICENSE|SQL|bin|CHANGELOG)$ - [F]
+RewriteRule ^/?(README(.md)?|INSTALL|LICENSE|CHANGELOG|UPGRADING)$ - [F]
+RewriteRule ^/?(SQL|bin) - [F]
 </IfModule>
 
 <IfModule mod_deflate.c>

--
Gitblit v1.9.1