From cdd9ecdd68c8b0240a121a9bc07fd366a99bd1b3 Mon Sep 17 00:00:00 2001
From: Chris Smith <toonarmy@phpbb.com>
Date: Thu, 8 Apr 2010 10:08:18 +0200
Subject: [PATCH] [ticket/9520] Add some default web.config files for IIS.

These deny access to the various directories written to by phpBB.

PHPBB3-9520
---
 phpBB/cache/web.config                 | 13 +++++++++++++
 phpBB/files/web.config                 | 13 +++++++++++++
 phpBB/images/avatars/upload/web.config | 13 +++++++++++++
 phpBB/store/web.config                 | 13 +++++++++++++
 4 files changed, 52 insertions(+)
 create mode 100644 phpBB/cache/web.config
 create mode 100644 phpBB/files/web.config
 create mode 100644 phpBB/images/avatars/upload/web.config
 create mode 100644 phpBB/store/web.config

diff --git a/phpBB/cache/web.config b/phpBB/cache/web.config
new file mode 100644
index 0000000000..278494bafc
--- /dev/null
+++ b/phpBB/cache/web.config
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+	<system.webServer>
+		<rewrite>
+			<rules>
+				<rule name="phpBB Default Rule" stopProcessing="true">
+					<match url=".*" />
+					<action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." statusDescription="You do not have permission to view this directory or page." />
+				</rule>
+			</rules>
+		</rewrite>
+	</system.webServer>
+</configuration>
\ No newline at end of file
diff --git a/phpBB/files/web.config b/phpBB/files/web.config
new file mode 100644
index 0000000000..278494bafc
--- /dev/null
+++ b/phpBB/files/web.config
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+	<system.webServer>
+		<rewrite>
+			<rules>
+				<rule name="phpBB Default Rule" stopProcessing="true">
+					<match url=".*" />
+					<action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." statusDescription="You do not have permission to view this directory or page." />
+				</rule>
+			</rules>
+		</rewrite>
+	</system.webServer>
+</configuration>
\ No newline at end of file
diff --git a/phpBB/images/avatars/upload/web.config b/phpBB/images/avatars/upload/web.config
new file mode 100644
index 0000000000..278494bafc
--- /dev/null
+++ b/phpBB/images/avatars/upload/web.config
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+	<system.webServer>
+		<rewrite>
+			<rules>
+				<rule name="phpBB Default Rule" stopProcessing="true">
+					<match url=".*" />
+					<action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." statusDescription="You do not have permission to view this directory or page." />
+				</rule>
+			</rules>
+		</rewrite>
+	</system.webServer>
+</configuration>
\ No newline at end of file
diff --git a/phpBB/store/web.config b/phpBB/store/web.config
new file mode 100644
index 0000000000..278494bafc
--- /dev/null
+++ b/phpBB/store/web.config
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+	<system.webServer>
+		<rewrite>
+			<rules>
+				<rule name="phpBB Default Rule" stopProcessing="true">
+					<match url=".*" />
+					<action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." statusDescription="You do not have permission to view this directory or page." />
+				</rule>
+			</rules>
+		</rewrite>
+	</system.webServer>
+</configuration>
\ No newline at end of file