myron/do-server-config
1
0
Fork 0
mirror of https://github.com/myronblair/do-server-config synced 2026-07-28 05:22:53 -05:00
Code Issues Packages Projects Releases Wiki Activity

[orbis] Weekly backup 2026-07-07 — 318 files changed, 48597 insertions(+), 7 deletions(-)

Browse Source
This commit is contained in:
DO Server Backup
2026-07-07 15:58:55 +00:00
parent 5fda5a1536
commit fe18800d18
318 changed files with 48597 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sites/orbis.orbishosting.com/public_html/.htaccess
+10
View File
@@ -0,0 +1,10 @@
# Block direct web access to the .git directory and other dotfiles.
# The .git folder lives inside public_html (docRoot) and was found to be
# directly downloadable over HTTPS (e.g. https://orbis.orbishosting.com/.git/config),
# which leaked a live GitHub personal access token embedded in the remote URL.
# Note: standard Apache access-control directives (RedirectMatch, FilesMatch/
# Require all denied, Order/Deny) are silently ignored on this LiteSpeed vhost.
# Only mod_rewrite rules are honored (confirmed via testing), hence this form.
RewriteEngine On
RewriteCond %{REQUEST_URI} ^/\.git
RewriteRule .* - [F,L]