From 6dac91d77498961ce658cd36970e80d94ec517bb Mon Sep 17 00:00:00 2001
From: Mike Cochrane <mikec@mikenz.geek.nz>
Date: Sun, 20 Jul 2008 07:20:32 -0400
Subject: [PATCH] Block access to .ini files http://laconi.ca/PITS/00240

darcs-hash:20080720112032-533db-e7bd1e7faaf3f1580b90faf425997de034f1a0cc.gz
---
 htaccess.sample | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/htaccess.sample b/htaccess.sample
index 86d014618b..7ec889bc1c 100644
--- a/htaccess.sample
+++ b/htaccess.sample
@@ -96,3 +96,7 @@ RewriteRule ^api/blocks/create/(.*)$ index.php?action=api&apiaction=blocks&metho
 RewriteRule ^api/blocks/destroy/(.*)$ index.php?action=api&apiaction=blocks&method=destroy&argument=$1 [L,QSA]
 RewriteRule ^api/help/(.*)$ index.php?action=api&apiaction=help&method=$1 [L,QSA]
 
+<FilesMatch "\.(ini)">
+  Order allow,deny
+</FilesMatch>
+