more complete list of dirs to hide from web

diff --git a/apache.conf b/apache.conf
index d929a110c7fee7ccec8360eac66638b3c38691be..e9d448055b7ce58e3ac639c209a37e516bee9474 100644 (file)
--- a/apache.conf
+++ b/apache.conf
@@ -42,7 +42,7 @@ Alias /stikked /usr/share/stikked
        </IfModule>
 </Directory>
 
-<Directory /usr/share/stikked/application/config>
+<Directory ~ "/usr/share/stikked/application/(config|cache|controllers|core|errors|helpers|hooks|libraries|logs|models|third_party)">
     # Apache 2.x
     <IfModule !mod_authz_core.c>
         Order deny,allow

diff --git a/lighttpd.conf b/lighttpd.conf
index 5079809bcf2c2484fdaa548eff113363b16079c9..8a31163b7e6f85c3f75c5d0f58eb8b94839020c4 100644 (file)
--- a/lighttpd.conf
+++ b/lighttpd.conf
@@ -11,6 +11,6 @@ url.rewrite-once += (
        "^" + var.stikked_url + "/(.*)$" => var.stikked_url + "/index.php$2",
 )
 
-$HTTP["url"] =~ "^" + var.stikked_url + "/config/" {
+$HTTP["url"] =~ "^" + var.stikked_url + "/(config|cache|controllers|core|errors|helpers|hooks|libraries|logs|models|third_party)" {
     url.access-deny = ("")
 }

diff --git a/stikked.spec b/stikked.spec
index e5aa7b557941e4747c3ac06e33474557de8d048d..c20b244e5f53beb1d7eede2cfa837373424ec90b 100644 (file)
--- a/stikked.spec
+++ b/stikked.spec
@@ -1,7 +1,7 @@
 Summary:       Stikked is an Open-Source PHP Pastebin
 Name:          stikked
 Version:       0.8.6
-Release:       0.7
+Release:       0.9
 License:       CC0
 Group:         Applications/WWW
 Source0:       https://github.com/claudehohl/Stikked/archive/%{version}/%{name}-%{version}.tar.gz
@@ -34,9 +34,22 @@ simple and easy to use user interface.
 %setup -q -n Stikked-%{version}
 %undos -f php
 
+# access restricted by webserver config
+rm htdocs/application/config/index.html
+rm htdocs/application/cache/index.html
+rm htdocs/application/controllers/index.html
+rm htdocs/application/core/index.html
+rm htdocs/application/errors/index.html
+rm htdocs/application/helpers/index.html
+rm htdocs/application/hooks/index.html
+rm htdocs/application/index.html
+rm htdocs/application/libraries/index.html
+rm htdocs/application/logs/index.html
+rm htdocs/application/models/index.html
+rm htdocs/application/third_party/index.html
+
 # this is to simplify install
 mv htdocs/application/config .
-rm config/index.html
 mv config/stikked.php{.dist,}
 
 %patch0 -p1
@@ -46,7 +59,7 @@ rm -rf $RPM_BUILD_ROOT
 install -d $RPM_BUILD_ROOT{%{_sysconfdir},%{_appdir}}
 
 cp -a htdocs/* $RPM_BUILD_ROOT%{_appdir}
-cp -a config/*  $RPM_BUILD_ROOT%{_sysconfdir}
+cp -a config/* $RPM_BUILD_ROOT%{_sysconfdir}
 ln -s %{_sysconfdir} $RPM_BUILD_ROOT%{_appdir}/application/config
 
 cp -p %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/apache.conf