From 3080cff8b4887628004bd632e7c8a3a3f2baa3b6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20FAMIBELLE-PRONZOLA?= <c.pronzola@tuta.io>
Date: Mon, 21 Jul 2025 13:33:23 +0400
Subject: [PATCH] fix: remove php denied access

---
 conf/.htaccess.sample | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/conf/.htaccess.sample b/conf/.htaccess.sample
index d434f0f..303524b 100644
--- a/conf/.htaccess.sample
+++ b/conf/.htaccess.sample
@@ -5,7 +5,12 @@ RewriteEngine On
 # ======================
 
 # Bloquer l'accès aux fichiers de configuration
-<Files ~ "\.(php|inc|conf|config|local)$">
+<Files ~ "\.(inc|conf|config|local)$">
+    Require all denied
+</Files>
+
+# Bloquer les fichiers PHP dans includes/
+<Files "includes/*.php">
     Require all denied
 </Files>