fix(security): Update .htaccess 403 directives

crowdsecurity · Dec 12, 2024 · 0a6871b · 0a6871b
1 parent 381f78c
commit 0a6871b
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/.htaccess b/.htaccess
@@ -1,3 +1,3 @@
-Redirectmatch 403 wp-content/plugins/crowdsec/logs/
-Redirectmatch 403 wp-content/plugins/crowdsec/.cache/
-Redirectmatch 403 wp-content/plugins/crowdsec/inc/standalone-settings
+Redirectmatch 403 wp-content/uploads/crowdsec/logs/
+Redirectmatch 403 wp-content/uploads/crowdsec/cache/
+Redirectmatch 403 wp-content/plugins/crowdsec/inc/standalone-settings
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -19,6 +19,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Make some fields required when necessary in the settings page (LAPI URL, Api key if authentication type is Api key, etc.)
 - Update the standalone settings file if the file is already present (even if the setting is disabled)
 
+### Fixed
+
+- Fix `.htaccess` directives
+
 ---
 
 ## [2.6.7](https://github.com/crowdsecurity/cs-wordpress-bouncer/releases/tag/v2.6.7) - 2024-07-26