.htaccess changes #302

darcs-hash:20050504181447-9977f-e61b087889c34847c5e37e23b6181ed20363b4ea.gz

.htaccess.dist

 ## Enable this to restrict editing to logged in users only
 
+#disable indexes
+Options -Indexes
+
 ## make sure nobody gets the htaccess files
-<Files ~ "^\.ht">
+<Files ~ "^[\._]ht">
     Order allow,deny
     Deny from all
     Satisfy All

media/.htaccess

-## The following directives should enhance security in the media
-## directory. However they are reported to make some trouble with
-## Apache2 and/or when PHP is used as CGI.
-## They are not really needed anymore as the upload mechanism
-## now is controlled through $conf['uploadtypes'] - but you may want
-## to try if they work for you. Some more security is always nice :-)
-
-# php_value engine off
-# AddType text/plain .php .phtml .php3 .html .htm .shtml
+order allow,deny
+deny from all