[ticket/9520] New web.config file as suggested by Microsoft using request filter

PHPBB3-9520
This commit is contained in:
Chris Smith 2010-04-28 19:20:54 +01:00 committed by Nils Adermann
parent e11e53e11b
commit 8612fc23d4

View file

@ -1,17 +1,25 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<configuration> <configuration>
<system.webServer> <system.webServer>
<rewrite> <security>
<rules> <requestFiltering>
<rule name="phpBB config.php Rule" patternSyntax="Wildcard" stopProcessing="true"> <hiddenSegments>
<match url="*config.php" /> <add segment="cache" />
<action type="AbortRequest" /> <add segment="files" />
</rule> <add segment="store" />­
<rule name="phpBB common.php Rule" patternSyntax="Wildcard" stopProcessing="true"> </hiddenSegments>
<match url="*common.php" /> </requestFiltering>
<action type="AbortRequest" /> </security>
</rule>
</rules>
</rewrite>
</system.webServer> </system.webServer>
<location path="images/avatars">
<system.webServer>
<security>
<requestFiltering>
<hiddenSegments>
<add segment="upload" />
</hiddenSegments>
</requestFiltering>
</security>
</system.webServer>
</location>
</configuration> </configuration>