From c8a6f6b54df9c6e2b5ecabaf08cd402ea5820bbd Mon Sep 17 00:00:00 2001
From: onli <onli@paskuda.biz>
Date: Thu, 6 Jun 2024 15:28:13 +0200
Subject: [PATCH] Block .inc files in .htaccess template

---
 docs/NEWS                              | 2 ++
 include/tpl/htaccess_cgi_errordocs.tpl | 4 ++++
 include/tpl/htaccess_cgi_normal.tpl    | 4 ++++
 include/tpl/htaccess_cgi_rewrite.tpl   | 4 ++++
 include/tpl/htaccess_cgi_rewrite2.tpl  | 4 ++++
 include/tpl/htaccess_errordocs.tpl     | 4 ++++
 include/tpl/htaccess_normal.tpl        | 4 ++++
 include/tpl/htaccess_rewrite.tpl       | 4 ++++
 include/tpl/htaccess_rewrite2.tpl      | 4 ++++
 9 files changed, 34 insertions(+)

diff --git a/docs/NEWS b/docs/NEWS
index 22927388a..f7c06aea1 100644
--- a/docs/NEWS
+++ b/docs/NEWS
@@ -7,6 +7,8 @@ Version 2.6-alpha1 ()
    * Fix token cleanup SQL statement in PostgreSQL environments
      (thanks to HQJaTu Jari Turkia)
 
+   * Block access to .inc php files via .htaccess
+
 Version 2.5.0 (February 13th, 2024)
 ------------------------------------------------------------------------
 
diff --git a/include/tpl/htaccess_cgi_errordocs.tpl b/include/tpl/htaccess_cgi_errordocs.tpl
index 18955145b..49b4e67fc 100644
--- a/include/tpl/htaccess_cgi_errordocs.tpl
+++ b/include/tpl/htaccess_cgi_errordocs.tpl
@@ -22,4 +22,8 @@ DirectoryIndex {PREFIX}{indexFile}
     deny from all
 </Files>
 
+<Files *.inc>
+    deny from all
+</Files> 
+
 # END s9y
diff --git a/include/tpl/htaccess_cgi_normal.tpl b/include/tpl/htaccess_cgi_normal.tpl
index 8e5b3bcb0..fd47bd264 100644
--- a/include/tpl/htaccess_cgi_normal.tpl
+++ b/include/tpl/htaccess_cgi_normal.tpl
@@ -21,4 +21,8 @@ DirectoryIndex {PREFIX}{indexFile}
     deny from all
 </Files>
 
+<Files *.inc>
+    deny from all
+</Files> 
+
 # END s9y
diff --git a/include/tpl/htaccess_cgi_rewrite.tpl b/include/tpl/htaccess_cgi_rewrite.tpl
index 5c8ed1f15..4a93b5f15 100644
--- a/include/tpl/htaccess_cgi_rewrite.tpl
+++ b/include/tpl/htaccess_cgi_rewrite.tpl
@@ -52,4 +52,8 @@ RewriteRule (.*\.html?) {indexFile}?url=/$1 [L,QSA]
     deny from all
 </Files>
 
+<Files *.inc>
+    deny from all
+</Files> 
+
 # END s9y
diff --git a/include/tpl/htaccess_cgi_rewrite2.tpl b/include/tpl/htaccess_cgi_rewrite2.tpl
index 42f1c365c..7f9002573 100644
--- a/include/tpl/htaccess_cgi_rewrite2.tpl
+++ b/include/tpl/htaccess_cgi_rewrite2.tpl
@@ -51,4 +51,8 @@ RewriteRule (.*\.html?) {indexFile}?url=/$1 [L,QSA]
     deny from all
 </Files>
 
+<Files *.inc>
+    deny from all
+</Files> 
+
 # END s9y
diff --git a/include/tpl/htaccess_errordocs.tpl b/include/tpl/htaccess_errordocs.tpl
index 18955145b..49b4e67fc 100644
--- a/include/tpl/htaccess_errordocs.tpl
+++ b/include/tpl/htaccess_errordocs.tpl
@@ -22,4 +22,8 @@ DirectoryIndex {PREFIX}{indexFile}
     deny from all
 </Files>
 
+<Files *.inc>
+    deny from all
+</Files> 
+
 # END s9y
diff --git a/include/tpl/htaccess_normal.tpl b/include/tpl/htaccess_normal.tpl
index 8e5b3bcb0..fd47bd264 100644
--- a/include/tpl/htaccess_normal.tpl
+++ b/include/tpl/htaccess_normal.tpl
@@ -21,4 +21,8 @@ DirectoryIndex {PREFIX}{indexFile}
     deny from all
 </Files>
 
+<Files *.inc>
+    deny from all
+</Files> 
+
 # END s9y
diff --git a/include/tpl/htaccess_rewrite.tpl b/include/tpl/htaccess_rewrite.tpl
index 5e28c5c15..c8a0740b3 100644
--- a/include/tpl/htaccess_rewrite.tpl
+++ b/include/tpl/htaccess_rewrite.tpl
@@ -52,4 +52,8 @@ RewriteRule (.*\.html?) {indexFile}?url=/$1 [L,QSA]
     deny from all
 </Files>
 
+<Files *.inc>
+    deny from all
+</Files> 
+
 # END s9y
diff --git a/include/tpl/htaccess_rewrite2.tpl b/include/tpl/htaccess_rewrite2.tpl
index 42f1c365c..7f9002573 100644
--- a/include/tpl/htaccess_rewrite2.tpl
+++ b/include/tpl/htaccess_rewrite2.tpl
@@ -51,4 +51,8 @@ RewriteRule (.*\.html?) {indexFile}?url=/$1 [L,QSA]
     deny from all
 </Files>
 
+<Files *.inc>
+    deny from all
+</Files> 
+
 # END s9y