From ddbdcaa7281cc147592b302120d873501824f237 Mon Sep 17 00:00:00 2001
From: Krehan Tim <mail@timkrehan.de>
Date: Mon, 12 Nov 2018 13:30:54 +0100
Subject: [PATCH] added .htaccess to prevent unauthorized access

---
 config/.htaccess |  5 ++++-
 php/.htaccess    | 16 ++++++++++++++++
 2 files changed, 20 insertions(+), 1 deletion(-)
 create mode 100644 php/.htaccess

diff --git a/config/.htaccess b/config/.htaccess
index b66e808..98e9e6d 100644
--- a/config/.htaccess
+++ b/config/.htaccess
@@ -1 +1,4 @@
-Require all denied
+# prevent access to these files while not logged in
+<files "*.php">
+  Require all denied
+</files>
diff --git a/php/.htaccess b/php/.htaccess
new file mode 100644
index 0000000..da07521
--- /dev/null
+++ b/php/.htaccess
@@ -0,0 +1,16 @@
+# prevent access to these files while not logged in
+<files "classes.*.php">
+  Require all denied
+</files>
+
+<files "auth.php">
+  Require all denied
+</files>
+
+<files "connect.php">
+  Require all denied
+</files>
+
+<files "hash.php">
+  Require all denied
+</files>