{"action":"created","issue":{"url":"https://api.github.com/repos/modxcms/revolution/issues/12503","labels_url":"https://api.github.com/repos/modxcms/revolution/issues/12503/labels{/name}","comments_url":"https://api.github.com/repos/modxcms/revolution/issues/12503/comments","events_url":"https://api.github.com/repos/modxcms/revolution/issues/12503/events","html_url":"https://github.com/modxcms/revolution/pull/12503","id":93556977,"number":12503,"title":"Deny any access to core folder from web","user":{"login":"inreti","id":2852461,"avatar_url":"https://avatars.githubusercontent.com/u/2852461?v=3","gravatar_id":"","url":"https://api.github.com/users/inreti","html_url":"https://github.com/inreti","followers_url":"https://api.github.com/users/inreti/followers","following_url":"https://api.github.com/users/inreti/following{/other_user}","gists_url":"https://api.github.com/users/inreti/gists{/gist_id}","starred_url":"https://api.github.com/users/inreti/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/inreti/subscriptions","organizations_url":"https://api.github.com/users/inreti/orgs","repos_url":"https://api.github.com/users/inreti/repos","events_url":"https://api.github.com/users/inreti/events{/privacy}","received_events_url":"https://api.github.com/users/inreti/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/modxcms/revolution/labels/state/awaiting-feedback","name":"state/awaiting-feedback","color":"d4c5f9"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/modxcms/revolution/milestones/65","html_url":"https://github.com/modxcms/revolution/milestones/v2.4.1-pl","labels_url":"https://api.github.com/repos/modxcms/revolution/milestones/65/labels","id":1264188,"number":65,"title":"v2.4.1-pl","description":"","creator":{"login":"Mark-H","id":312944,"avatar_url":"https://avatars.githubusercontent.com/u/312944?v=3","gravatar_id":"","url":"https://api.github.com/users/Mark-H","html_url":"https://github.com/Mark-H","followers_url":"https://api.github.com/users/Mark-H/followers","following_url":"https://api.github.com/users/Mark-H/following{/other_user}","gists_url":"https://api.github.com/users/Mark-H/gists{/gist_id}","starred_url":"https://api.github.com/users/Mark-H/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Mark-H/subscriptions","organizations_url":"https://api.github.com/users/Mark-H/orgs","repos_url":"https://api.github.com/users/Mark-H/repos","events_url":"https://api.github.com/users/Mark-H/events{/privacy}","received_events_url":"https://api.github.com/users/Mark-H/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":0,"state":"open","created_at":"2015-08-20T10:10:26Z","updated_at":"2015-08-20T10:10:56Z","due_on":null,"closed_at":null},"comments":7,"created_at":"2015-07-07T15:23:46Z","updated_at":"2015-08-28T09:26:29Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/modxcms/revolution/pulls/12503","html_url":"https://github.com/modxcms/revolution/pull/12503","diff_url":"https://github.com/modxcms/revolution/pull/12503.diff","patch_url":"https://github.com/modxcms/revolution/pull/12503.patch"},"body":"### What does it do?\r\nPrevent sneaking around or fingerprinting, the whole core directory should be denied. \r\n\r\n### Why is it needed?\r\nOtherwise it is possible to read the error log or check the changelog.txt from the web. As this is the example file, it should include the most secure set up. \r\n\r\n### Related issues\r\nFor example mentioned in #8854, #12490\r\n\r\n### Enhancements\r\nThe file should give examples for other environments as well (or other example files). Set up for Nginx and IIS at least are a good advice for users. \r\n"},"comment":{"url":"https://api.github.com/repos/modxcms/revolution/issues/comments/135710203","html_url":"https://github.com/modxcms/revolution/pull/12503#issuecomment-135710203","issue_url":"https://api.github.com/repos/modxcms/revolution/issues/12503","id":135710203,"user":{"login":"sottwell","id":1073780,"avatar_url":"https://avatars.githubusercontent.com/u/1073780?v=3","gravatar_id":"","url":"https://api.github.com/users/sottwell","html_url":"https://github.com/sottwell","followers_url":"https://api.github.com/users/sottwell/followers","following_url":"https://api.github.com/users/sottwell/following{/other_user}","gists_url":"https://api.github.com/users/sottwell/gists{/gist_id}","starred_url":"https://api.github.com/users/sottwell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sottwell/subscriptions","organizations_url":"https://api.github.com/users/sottwell/orgs","repos_url":"https://api.github.com/users/sottwell/repos","events_url":"https://api.github.com/users/sottwell/events{/privacy}","received_events_url":"https://api.github.com/users/sottwell/received_events","type":"User","site_admin":false},"created_at":"2015-08-28T09:26:29Z","updated_at":"2015-08-28T09:26:29Z","body":"Using the global deny all directive causes a lot of entries to pile up in the server error logs, since every time the dashboard widget checks it, it triggers a forbidden error. "}}