0ce574953e
ROOT DIRECTORY (.htaccess): - Deny all access (root shouldn't be web-accessible) - Protect all files by default WEB DIRECTORY (web/.htaccess): - Protect .env, .json, .md, .txt files - Block test/debug files from web access - Prevent parent directory traversal - Disable directory listing - Updated PHP timeout settings - Security headers REPORTS DIRECTORY (reports/.htaccess): - Allow PDF downloads only - Deny directory listing - Block access to log files and other non-PDF files SECURITY: Prevents exposure of sensitive files like service_account.json, .env, API keys |
||
|---|---|---|
| .. | ||
| .htaccess | ||