From b2e5fa84ea693c2992acfe91e0bef1421b085b14 Mon Sep 17 00:00:00 2001
From: snipe <snipe@snipe.net>
Date: Tue, 19 Apr 2016 19:44:09 -0700
Subject: [PATCH] Prevent direct viewing of .env file if installed in a
 subdirectory

---
 .htaccess | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 .htaccess

diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000000..93ca6c0e48
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,11 @@
+<IfModule mod_rewrite.c>
+    <IfModule mod_negotiation.c>
+        Options -MultiViews
+    </IfModule>
+
+    # Make sure .env files not not browseable if in a sub-directory.
+    <FilesMatch "\.env$">
+    Deny from all
+    </FilesMatch>
+    
+</IfModule>