From 759e748c1e0c308f676621095b7fca17babbc93c Mon Sep 17 00:00:00 2001
From: Abdulrahman <saanina@gmail.com>
Date: Tue, 9 Jan 2018 02:13:02 +0300
Subject: [PATCH] .htaccess

---
 uploads/.htaccess        | 25 +++++++++++++++++++++++++
 uploads/thumbs/.htaccess | 11 +++++++++++
 2 files changed, 36 insertions(+)
 create mode 100755 uploads/.htaccess
 create mode 100755 uploads/thumbs/.htaccess

diff --git a/uploads/.htaccess b/uploads/.htaccess
new file mode 100755
index 0000000..3d84673
--- /dev/null
+++ b/uploads/.htaccess
@@ -0,0 +1,25 @@
+# Htaccess for Protection
+# Kleeja 2007 - 2010
+# $Id: .htaccess 1557 2010-08-08 10:09:50Z saanina $
+
+<Files ~ "^.*\.(php|php*|cgi|pl|phtml|shtml|sql|asp|aspx)">
+    Order allow,deny
+    Deny from all
+</Files>
+
+#Disable PHP engine in this folder
+<IfModule mod_php4.c>
+php_flag engine off
+</IfModule>
+
+#Disable PHP engine in this folder
+<IfModule mod_php5.c>
+php_flag engine off
+</IfModule>
+
+#Don't handle those types in this folder
+RemoveType .php .php* .phtml .pl .cgi .asp .aspx .sql
+
+#404 error should show something usefull
+#todo/ images->image info, another show our info page
+ErrorDocument 404 ../images/not_exists.jpg
diff --git a/uploads/thumbs/.htaccess b/uploads/thumbs/.htaccess
new file mode 100755
index 0000000..6cde455
--- /dev/null
+++ b/uploads/thumbs/.htaccess
@@ -0,0 +1,11 @@
+<Files ~ "^.*\.(php|php*|cgi|pl|phtml|shtml|sql|asp|aspx)">
+    Order allow,deny
+    Deny from all
+</Files>
+<IfModule mod_php4.c>
+php_flag engine off
+</IfModule>
+<IfModule mod_php5.c>
+php_flag engine off
+</IfModule>
+RemoveType .php .php* .phtml .pl .cgi .asp .aspx .sql
\ No newline at end of file