Files
safe-paste/public/.htaccess

18 lines
558 B
ApacheConf

Options -Indexes
DirectoryIndex index.php
RewriteEngine On
# Route /view/{id} -> view.php?id={id} (GET and POST)
RewriteCond %{REQUEST_METHOD} GET [OR]
RewriteCond %{REQUEST_METHOD} POST
RewriteRule ^view/([a-f0-9]+)/?$ view.php?id=$1 [L,QSA]
# REST API routes
RewriteRule ^api/paste/([a-f0-9]+)/unlock/?$ api.php?id=$1&action=unlock [L,QSA]
RewriteRule ^api/paste/([a-f0-9]+)/?$ api.php?id=$1&action=get [L,QSA]
RewriteRule ^api/paste/?$ api.php?action=create [L,QSA]
# Block direct access to .env and sensitive files
RewriteRule ^(\.env|\.git) - [F,L]