summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--.htaccess33
1 files changed, 33 insertions, 0 deletions
diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000..a189cbe
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,33 @@
+<IfModule mod_php5.c>
+php_flag display_errors Off
+php_flag log_errors On
+php_value error_log syslog
+
+php_flag safe_mode On
+php_flag safe_mode_gid On
+php_value open_basedir /var/www/board
+php_value safe_mode_exec_dir /var/empty
+</IfModule>
+
+<FilesMatch "^database.*$">
+ Order Deny,Allow
+ Deny from all
+</FilesMatch>
+
+
+
+
+<FilesMatch "^(motion|vote|proxy)\.php$">
+ # these files require authentication
+ <IfModule mod_ssl.c>
+ SSLOptions +StdEnvVars +ExportCertData
+ SSLUserName SSL_CLIENT_S_DN_Email
+ SSLVerifyClient optional
+ <IfModule mod_rewrite.c>
+ RewriteEngine on
+ RewriteCond %{SSL:SSL_CLIENT_VERIFY} !=SUCCESS
+ RewriteRule .? - [F]
+ ErrorDocument 403 "You need a client side certificate issued by CAcert to access this url"
+ </IfModule>
+ </IfModule>
+</FilesMatch>