Allow executing only the specific PHP files as external endpoints, re…

…quired since PrestaShop 9.0
PrestaShop · Feb 13, 2024 · 1677f3b · 1677f3b
1 parent 33de321
commit 1677f3b
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.htaccess b/.htaccess
@@ -0,0 +1,13 @@
+# In PrestaShop 9.0 php files are now protected so we allow only specific endpoints to be accessible
+<FilesMatch "ps_facetedsearch-.+\.php$">
+    # Apache 2.2
+    <IfModule !mod_authz_core.c>
+        Order Allow,Deny
+        Allow from all
+    </IfModule>
+
+    # Apache 2.4
+    <IfModule mod_authz_core.c>
+        Require all granted
+    </IfModule>
+</FilesMatch>