From e7ca8bfa122911bbde285cbb858c88e57d4815ff Mon Sep 17 00:00:00 2001 From: Tobias Reich Date: Mon, 30 Sep 2013 18:48:23 +0200 Subject: [PATCH] Security fix Depending on your server-configuration, your photos were listed inside the upload-directory. This security-flaw is now fixed. Thanks @GustavePate for the notice. --- .htaccess | 1 + uploads/big/{empty => index.html} | 0 uploads/import/{empty => index.html} | 0 uploads/thumb/{empty => index.html} | 0 4 files changed, 1 insertion(+) create mode 100644 .htaccess rename uploads/big/{empty => index.html} (100%) mode change 100755 => 100644 rename uploads/import/{empty => index.html} (100%) mode change 100755 => 100644 rename uploads/thumb/{empty => index.html} (100%) mode change 100755 => 100644 diff --git a/.htaccess b/.htaccess new file mode 100644 index 0000000..782ecb4 --- /dev/null +++ b/.htaccess @@ -0,0 +1 @@ +IndexIgnore * \ No newline at end of file diff --git a/uploads/big/empty b/uploads/big/index.html old mode 100755 new mode 100644 similarity index 100% rename from uploads/big/empty rename to uploads/big/index.html diff --git a/uploads/import/empty b/uploads/import/index.html old mode 100755 new mode 100644 similarity index 100% rename from uploads/import/empty rename to uploads/import/index.html diff --git a/uploads/thumb/empty b/uploads/thumb/index.html old mode 100755 new mode 100644 similarity index 100% rename from uploads/thumb/empty rename to uploads/thumb/index.html