Secure framework and application.ini

diff --git a/.htaccess b/.htaccess
index 8bd702a809af66517dce5c4b57642d4fd9acffee..7ebd68c490e3e108c73886ccf7bbb3f5e1244f40 100644 (file)
--- a/.htaccess
+++ b/.htaccess
@@ -27,6 +27,8 @@
        # Redirection to www. subdomain
        RewriteCond %{HTTP_HOST} ^ccgm.fr$
        RewriteRule ^(.*)$ http://www.ccgm.fr/$1 [R=301,L]
+       # Protect framework
+       RewriteRule ^framework/.*$ - [F]
        # Redirect auth header to env
        RewriteRule ^.*$ - [E=REMOTE_USER:%{HTTP:Authorization}]
        # Skip static files