2 Commits
Author SHA1 Message Date
E.Noorlander c6c2fdb67b Security fixes n.a.v. pentest op noorlander.info
- CSRF token toegevoegd aan admin login formulier
- Directory listing uitgeschakeld (Options -Indexes)
- Secure/SameSite=Strict cookie verbeterd in AdminAuth
- app.js.backup en source maps verwijderd
- Version disclosure configureerbaar via config.json
- .map en backup extensies geblokkeerd in .htaccess
2026-07-14 14:25:04 +02:00
E.Noorlander 2e5672ee60 Add secure public directory structure with .htaccess
- Created public/ directory for web-accessible files
- Moved content and assets to public/ subdirectories
- Added .htaccess files for security and routing
- Updated config.php to use public/content path
- Blocked direct access to PHP files and sensitive directories
- Added URL routing to index.php
- Enhanced security headers and PHP settings
2025-11-19 14:00:03 +01:00