From 70c9e633039fd3337db92586f888a1600bd3e0dd Mon Sep 17 00:00:00 2001
From: Marc Delisle <marc@infomarc.info>
Date: Wed, 27 Sep 2006 20:12:45 +0000
Subject: [PATCH] correct syntax for blocking access to libraries

---
 ChangeLog           | 2 ++
 libraries/.htaccess | 5 ++---
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index 7d97fed348..bb122d8696 100755
--- a/ChangeLog
+++ b/ChangeLog
@@ -9,6 +9,8 @@ $Source$
     * libraries/common.lib.php, /session.inc.php, /url_generating.lib.php:
       security fixes (announcement will come later),
       thanks to Sebastian Mendel and Stefan Esser
+    * libraries/.htaccess: remove potential vulnerability (allow from none),
+      thanks to Michael Heimpold
 
 2006-09-22 Marc Delisle  <lem9@users.sourceforge.net>
     * libraries/tbl_properties_links.inc.php: bug #1560152, 
diff --git a/libraries/.htaccess b/libraries/.htaccess
index 47f32f26bf..56baee608b 100644
--- a/libraries/.htaccess
+++ b/libraries/.htaccess
@@ -1,4 +1,3 @@
 # This folder does not require access over HTTP
-Order deny,allow
-Deny from all
-Allow from none
+# (the following directive denies access by default)
+Order allow,deny